Virer Windows PC Defender

Bonjour à tous et merci d avance, j ai un grand besoin d aide ça fait des jours que je cherche une solution !

J ai chopé le Windows PC Defender et je l ai supprimé du moins je le croyais avec CCleaner. Mais voila je suis tout le temps redirigé, impossible de voir mes mails et mon antivirus arrête pas de me dire qu un programme ou un tiers essaye de se connecter à internet explorer, impossible d afficher mon gestionnaire des taches...

J ai un grand besoin d aide ça fait des jours que je cherche une solution !

Pour vous donner une idée de ce que j ai essayé :
Mon antivirus a rien trouvé
Spyware doctor et RHosts.exe ne se lancent pas
Spybot, malwarebytes, combofix et SmitfraudFix n ont pas résolu le problème

Voila... je vous poste mon rapport hijackthis, si vous avez une idée hésitez pas... Je crois que sinon je vais être obligé de faire une restauration système...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:05:47, on 24/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Apps\Softex\OmniPass\Omniserv.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Apps\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\PROGRA~1\Wanadoo\CnxMon.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Apps\Powercinema\PCMService.exe
C:\Apps\Softex\OmniPass\scureapp.exe
C:\Program Files\MIC\HAWAII\Hawaii.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Fingerprint Sensor\ATSwpNav.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\VirusKeeper.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_watchop.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Messenger\msmsgs.exe
D:\Documents and Settings\Tustus\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O1 - Hosts: 74.125.45.100 4-open-davinci.com
O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com
O1 - Hosts: 74.125.45.100 privatesecuredpayments.com
O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com
O1 - Hosts: 74.125.45.100 getantivirusplusnow.com
O1 - Hosts: 74.125.45.100 secure-plus-payments.com
O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com
O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com
O1 - Hosts: 74.125.45.100 www.getavplusnow.com
O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com
O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com
O1 - Hosts: 74.125.45.100 paysoftbillsolution.com
O1 - Hosts: 206.53.61.77 google.ae
O1 - Hosts: 206.53.61.77 google.as
O1 - Hosts: 206.53.61.77 google.at
O1 - Hosts: 206.53.61.77 google.az
O1 - Hosts: 206.53.61.77 google.ba
O1 - Hosts: 206.53.61.77 google.be
O1 - Hosts: 206.53.61.77 google.bg
O1 - Hosts: 206.53.61.77 google.bs
O1 - Hosts: 206.53.61.77 google.ca
O1 - Hosts: 206.53.61.77 google.cd
O1 - Hosts: 206.53.61.77 google.com.gh
O1 - Hosts: 206.53.61.77 google.com.hk
O1 - Hosts: 206.53.61.77 google.com.jm
O1 - Hosts: 206.53.61.77 google.com.mx
O1 - Hosts: 206.53.61.77 google.com.my
O1 - Hosts: 206.53.61.77 google.com.na
O1 - Hosts: 206.53.61.77 google.com.nf
O1 - Hosts: 206.53.61.77 google.com.ng
O1 - Hosts: 206.53.61.77 google.ch
O1 - Hosts: 206.53.61.77 google.com.np
O1 - Hosts: 206.53.61.77 google.com.pr
O1 - Hosts: 206.53.61.77 google.com.qa
O1 - Hosts: 206.53.61.77 google.com.sg
O1 - Hosts: 206.53.61.77 google.com.tj
O1 - Hosts: 206.53.61.77 google.com.tw
O1 - Hosts: 206.53.61.77 google.dj
O1 - Hosts: 206.53.61.77 google.de
O1 - Hosts: 206.53.61.77 google.dk
O1 - Hosts: 206.53.61.77 google.dm
O1 - Hosts: 206.53.61.77 google.ee
O1 - Hosts: 206.53.61.77 google.fi
O1 - Hosts: 206.53.61.77 google.fm
O1 - Hosts: 206.53.61.77 google.fr
O1 - Hosts: 206.53.61.77 google.ge
O1 - Hosts: 206.53.61.77 google.gg
O1 - Hosts: 206.53.61.77 google.gm
O1 - Hosts: 206.53.61.77 google.gr
O1 - Hosts: 206.53.61.77 google.ht
O1 - Hosts: 206.53.61.77 google.ie
O1 - Hosts: 206.53.61.77 google.im
O1 - Hosts: 206.53.61.77 google.in
O1 - Hosts: 206.53.61.77 google.it
O1 - Hosts: 206.53.61.77 google.ki
O1 - Hosts: 206.53.61.77 google.la
O1 - Hosts: 206.53.61.77 google.li
O1 - Hosts: 206.53.61.77 google.lv
O1 - Hosts: 206.53.61.77 google.ma
O1 - Hosts: 206.53.61.77 google.ms
O1 - Hosts: 206.53.61.77 google.mu
O1 - Hosts: 206.53.61.77 google.mw
O1 - Hosts: 206.53.61.77 google.nl
O1 - Hosts: 206.53.61.77 google.no
O1 - Hosts: 206.53.61.77 google.nr
O1 - Hosts: 206.53.61.77 google.nu
O1 - Hosts: 206.53.61.77 google.pl
O1 - Hosts: 206.53.61.77 google.pn
O1 - Hosts: 206.53.61.77 google.pt
O1 - Hosts: 206.53.61.77 google.ro
O1 - Hosts: 206.53.61.77 google.ru
O1 - Hosts: 206.53.61.77 google.rw
O1 - Hosts: 206.53.61.77 google.sc
O1 - Hosts: 206.53.61.77 google.se
O1 - Hosts: 206.53.61.77 google.sh
O1 - Hosts: 206.53.61.77 google.si
O1 - Hosts: 206.53.61.77 google.sm
O1 - Hosts: 206.53.61.77 google.sn
O1 - Hosts: 206.53.61.77 google.st
O1 - Hosts: 206.53.61.77 google.tl
O1 - Hosts: 206.53.61.77 google.tm
O1 - Hosts: 206.53.61.77 google.tt
O1 - Hosts: 206.53.61.77 google.us
O1 - Hosts: 206.53.61.77 google.vu
O1 - Hosts: 206.53.61.77 google.ws
O1 - Hosts: 206.53.61.77 google.co.ck
O1 - Hosts: 206.53.61.77 google.co.id
O1 - Hosts: 206.53.61.77 google.co.il
O1 - Hosts: 206.53.61.77 google.co.in
O1 - Hosts: 206.53.61.77 google.co.jp
O1 - Hosts: 206.53.61.77 google.co.kr
O1 - Hosts: 206.53.61.77 google.co.ls
O1 - Hosts: 206.53.61.77 google.co.ma
O1 - Hosts: 206.53.61.77 google.co.nz
O1 - Hosts: 206.53.61.77 google.co.tz
O1 - Hosts: 206.53.61.77 google.co.ug
O1 - Hosts: 206.53.61.77 google.co.uk
O1 - Hosts: 206.53.61.77 google.co.za
O1 - Hosts: 206.53.61.77 google.co.zm
O1 - Hosts: 206.53.61.77 google.com
O1 - Hosts: 206.53.61.77 google.com.af
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [OmniPass] C:\Apps\Softex\OmniPass\scureapp.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [MM_MODULE] C:\Program Files\MIC\HAWAII\Hawaii.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ATSwpNav] "C:\Program Files\Fingerprint Sensor\ATSwpNav" -run
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [VirusKeeper] C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\VirusKeeper.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.1.14/cfweb_activex.camfrogweb.com-advanced-2.0.1.14_instmodule.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - https://www.photobox.fr/?channel=1005
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp10.photoprintit.de/microsite/5450/defaults/activex/IPSUploader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6539A407-1761-4EE3-BF19-88B085E30B65}: NameServer = 80.10.246.130 81.253.149.10
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Service Google Update (gupdate1c9ece72abbab74) (gupdate1c9ece72abbab74) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omniserv.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - AxBx - C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe

--
End of file - 19904 bytes
Configuration: Windows XP Internet Explorer 7.0

36 réponses

Résumé de la discussion

Une infection informatique survient après une suppression infructueuse de Windows Defender, avec des redirections persistantes, l’impossibilité d’afficher le gestionnaire des tâches et des alertes antivirus récurrentes. Plusieurs outils ont été employés et l’analyse du rapport HijackThis vise à repérer les entrées de démarrage et les composants indésirables à traiter. En cas d’intrusion prolongée, une restauration système peut être envisagée après sauvegarde des données et une vérification des paramètres réseau, des DNS et des services suspects. Certaines entrées proviennent de programmes légitimes mais peuvent être exploitées et nécessitent une vigilance sur les mises à jour et le nettoyage des DNS pour éviter de nouvelles redirections.

Bobot (l’IA à votre service)
  1. T'as essayé avec le programme de désinstallation de windows?
    1. Bonsoir Helloween77

      Télécharge Malwarebytes anti malware ici
      http://www.malwarebytes.org/mbam.php

      * Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

      (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/

      * Potasse le tuto pour te familiariser avec le prg :

      https://forum.pcastuces.com/sujet.asp?f=31&s=3

      (cela dis, il est très simple d’utilisation).

      relance malwarebytes en suivant scrupuleusement ces consignes :

      ! Déconnecte toi et ferme toutes applications en cours !

      * Lance Malwarebyte's .

      Fais un examen dit "Complet" .

      --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
      --> à la fin tu cliques sur "résultat" .
      --> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

      Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

      Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

      @+
  2. Non j ai pas encore essayé de désinstaller Windows

    J ai fait ce qu a dit Guillaume5188, ça m a trouvé des infections inoffensives mais rien changé au problème
    Que pensez vous que je doive faire??

    Le rapport Malware :

    alwarebytes' Anti-Malware 1.41
    Version de la base de données: 2775
    Windows 5.1.2600 Service Pack 3

    24/09/2009 23:17:12
    mbam-log-2009-09-24 (23-17-12).txt

    Type de recherche: Examen complet (C:\|D:\|)
    Eléments examinés: 300250
    Temps écoulé: 1 hour(s), 15 minute(s), 45 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 0
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 11

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\Quarantaine\mysmas.exe.7 (Worm.Kolab) -> Quarantined and deleted successfully.
    C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\Quarantaine\mysmas.exe.6 (Worm.Kolab) -> Quarantined and deleted successfully.
    C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\Quarantaine\lats.exe (Worm.Kolab) -> Quarantined and deleted successfully.
    C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\Quarantaine\lats.exe.2 (Worm.Kolab) -> Quarantined and deleted successfully.
    C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\Quarantaine\mysmas.exe (Worm.Kolab) -> Quarantined and deleted successfully.
    C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\Quarantaine\mysmas.exe.2 (Worm.Kolab) -> Quarantined and deleted successfully.
    C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\Quarantaine\mysmas.exe.3 (Worm.Kolab) -> Quarantined and deleted successfully.
    C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\Quarantaine\mysmas.exe.4 (Worm.Kolab) -> Quarantined and deleted successfully.
    C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\Quarantaine\mysmas.exe.5 (Worm.Kolab) -> Quarantined and deleted successfully.
    C:\Program Files\ts2-7\dll\systray.dll (Backdoor.Bot) -> Quarantined and deleted successfully.
    C:\ts2-7\dll\systray.dll (Backdoor.Bot) -> Quarantined and deleted successfully.
    1. Bonjour

      Tu es redirigé car tes fichiers host sont corrompus.
      Fait ceci stp:
      Télécharge HostsXpert sur ton Bureau :
      http://www.funkytoad.com/download/HostsXpert.zip

      ---> Décompresse-le (Clic droit >> Extraire ici)

      ---> Double-clique sur HostsXpert pour le lancer

      ---> clique sur le bouton "Restore MS Hosts File" puis ferme le programme

      PS : Avant de cliquer sur le bouton "Restore MS Hosts File", vérifie que le cadenas en haut à gauche est ouvert sinon tu vas avoir un message d'erreur.

      Ensuite pour vérifier poste moi un hijackthis
      Merci
  3. Salut Guillaume

    Bon déja je sais pas pourquoi mais y a du progrès depuis ce matin alors que j ai rien fait de spécial, je peux enfin voir mes mails et mon gestionnaire des taches, et l antivirus ne m embete plus.

    Par contre toujours ces redirections sur google.
    J avais vu en effet qu il y avait un problème d hosts. Quand je vais dans le dossier je peux modifier le fichier, mais quand je tape dans "exécuter" notepad C:\WINDOWS\System32\drivers\etc\hosts bizarrement le contenu reste inchangé.

    J ai essayé avec RHosts, il me dit impossible de créer le fichier C:\WINDOWS\System32\drivers\etc\hosts
    Et impossible d ouvrir le programme que tu m as conseillé, tu connaitrais pas une autre solution?

    Merci pour ton aide en tout cas
    1. Re

      On va essayer avec ceci:

      Télécharge SmitfraudFix (de de S!Ri, balltrap34 et moe31) : http://www.geekstogo.com/forum/files/file/6-smitfraudfix/

      - Enregistres-le sur le bureau

      - Double-clique sur SmitfraudFix.exe et choisis l'option 1 puis Entrée

      - Un rapport sera généré, poste-le dans ta prochaine réponse.

      NB: SmitFraudFix utilise process.exe qui est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

      @+
  4. Finalement après redémarrage j ai pu lancer HostsExpert
    Il me dit donc your hosts file are marked as a system file and cannot be manipulated
    marked as an hidden file
    Après impossible d ouvrir le cadenas et il veut pas créer le fichier sniff

    Voila mon rapport SmitFraudFix :

    SmitFraudFix v2.424

    Rapport fait à 18:37:00,95, 25/09/2009
    Executé à partir de D:\Documents and Settings\Tustus\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Norton Internet Security\ISSVC.exe
    C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
    C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
    C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
    C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
    C:\Program Files\Windows Live\Family Safety\fsssvc.exe
    c:\APPS\HIDSERVICE\HIDSERVICE.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Apps\Softex\OmniPass\Omniserv.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
    C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe
    c:\APPS\Powercinema\Kernel\TV\CLSched.exe
    C:\Apps\Softex\OmniPass\OPXPApp.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\WINDOWS\Explorer.EXE
    C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
    C:\PROGRA~1\Wanadoo\CnxMon.exe
    C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Apps\Powercinema\PCMService.exe
    C:\Apps\Softex\OmniPass\scureapp.exe
    C:\Program Files\MIC\HAWAII\Hawaii.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
    C:\Program Files\Fingerprint Sensor\ATSwpNav.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Windows Live\Family Safety\fsui.exe
    C:\Program Files\MessengerPlus! 3\MsgPlus.exe
    C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\VirusKeeper.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
    C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
    C:\Program Files\Uniblue\RegistryBooster 2009\registrybooster.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_watchop.exe
    C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
    C:\PROGRA~1\Wanadoo\ComComp.exe
    C:\PROGRA~1\Wanadoo\Watch.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Windows Live\Toolbar\wltuser.exe
    D:\Documents and Settings\Tustus\Bureau\SmitfraudFix\Policies.exe
    C:\WINDOWS\system32\cmd.exe
    C:\Program Files\Messenger\msmsgs.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    »»»»»»»»»»»»»»»»»»»»»»»» D:\

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

    »»»»»»»»»»»»»»»»»»»»»»»» D:\Documents and Settings\Tustus

    »»»»»»»»»»»»»»»»»»»»»»»» D:\DOCUME~1\Tustus\LOCALS~1\Temp

    »»»»»»»»»»»»»»»»»»»»»»»» D:\Documents and Settings\Tustus\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» D:\DOCUME~1\Tustus\Favoris

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    »»»»»»»»»»»»»»»»»»»»»»»» o4Patch
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    o4Patch
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    Agent.OMZ.Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

    »»»»»»»»»»»»»»»»»»»»»»»» RK

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: WAN (PPP/SLIP) Interface
    DNS Server Search Order: 80.10.246.130
    DNS Server Search Order: 81.253.149.10

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{6539A407-1761-4EE3-BF19-88B085E30B65}: NameServer=80.10.246.130 81.253.149.10
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{6539A407-1761-4EE3-BF19-88B085E30B65}: NameServer=80.10.246.130 81.253.149.10

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin
    1. Re

      Tu disposes de deux antivirus.
      Désinstalle viruskeeper;je me demande si ce n'est pas lui qui protège le fichier host.
      Ensuite réessaye :

      http://siri.urz.free.fr/Softs/RHosts.exe

      ou

      http://www.funkytoad.com/download/HostsXpert.zip

      tu sais faire...

      @+

      1. A part ça vous pensez que mon pc craint plus rien niveau sécurité?? (j achète souvent via le web c est pour ça que je demande...)
        1. Re

          Il faut régler ce problème de redirection.

          Essayons avec un autre anti spyware.Il y a quelque chose qui bloque la modification du fichier host modifié.

          Télécharge Superantispyware (SAS)
          https://www.superantispyware.com/

          Choisis "enregistrer" et enregistre-le sur ton bureau.

          Double-clique ou clic droit (exécuter en tant…) sous Vista sur l'icône d'installation qui vient de se créer et suis les instructions.

          Créé une icône sur le bureau.

          Double-clique clique ou clic droit (exécuter en tant…) sous Vista sur l'icône de SAS (une tête dans un cercle rouge barré) pour le lancer.

          - Si l'outil te demande de mettre à jour le programme ("update the program definitions", clique sur yes.
          - Sous Configuration and Préférences, clique sur le bouton "Préférences"
          - Clique sur l'onglet "Scanning Control "
          - Dans "Scanner Options ", assure toi que la case devant les lignes suivantes est cochée :

          Close browsers before scanning
          Scan for tracking cookies
          Terminate memory threats before quarantining
          - Laisse les autres lignes décochées.

          - Clique sur le bouton "Close" pour quitter l'écran du centre de contrôle.

          - Dans la fenêtre principale, clique, dans "Scan for Harmful Software", sur "Scan your computer".

          Dans la colonne de gauche, coche C:\Fixed Drive.

          Dans la colonne de droite, sous "Complete scan", clique sur "Perform Complete Scan"

          Clique sur "next" pour lancer le scan. Patiente pendant la durée du scan.

          A la fin du scan, une fenêtre de résultats s’ouvre. Clique sur OK.

          Assure toi que toutes les lignes de la fenêtre blanche sont cochées et clique sur "Next".

          Tout ce qui a été trouvé sera mis en quarantaine. S'il t’est demandé de redémarrer l'ordi ("reboot"), clique sur Yes.

          Pour recopier les informations sur le forum, fais ceci :

          - après le redémarrage de l'ordi, double-clique sur l'icône pour lancer SAS.
          - Clique sur "Preferences" puis sur l'onglet "Statistics/Logs ".
          - Dans "scanners logs", double-clique sur SUPERAntiSpyware Scan Log.

          - Le rapport va s'ouvrir dans ton éditeur de texte par défaut.

          - Copie son contenu dans ta réponse.

          Regarde bien le tuto il est très bien expliqué.

          https://www.malekal.com/?s=SUPERAntiSpyware

          @+
      2. Re
        Vu qu il a détecté un rogue Windows PC Defender j avais bon espoir. Mais non toujours des redirections et impossible de changer l host c est coriace... J imagine que je dois essayer d autres antispywares?
        Merci pour ton aide en tout cas.

        Generated 09/25/2009 at 10:28 PM

        Application Version : 4.29.1002

        Core Rules Database Version : 4125
        Trace Rules Database Version: 2064

        Scan type : Complete Scan
        Total Scan Time : 01:13:10

        Memory items scanned : 721
        Memory threats detected : 0
        Registry items scanned : 7169
        Registry threats detected : 0
        File items scanned : 102838
        File threats detected : 17

        Adware.Tracking Cookie
        D:\Documents and Settings\Tustus\Cookies\tustus@www.googleadservices[3].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@doubleclick[1].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@micromania.112.2o7[1].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@stopzilla[1].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@www.googleadservices[2].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@247realmedia[1].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@xiti[1].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@www.googleadservices[1].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@atdmt[2].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@www.googleadservices[5].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@content.yieldmanager[1].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@www.googleadservices[4].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@www.stopzilla[2].txt
        D:\Documents and Settings\Tustus\Cookies\tustus@avgtechnologies.112.2o7[1].txt

        Rogue.Windows PC Defender
        D:\Documents and Settings\All Users\Application Data\WPCDSYS\wpcd.cfg
        D:\Documents and Settings\All Users\Application Data\WPCDSYS
        D:\Documents and Settings\All Users\Application Data\DC07611
        1. Bonjour

          Pour une analyse plus complète de ton système .

          Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

          -> http://images.malwareremoval.com/random/RSIT.exe

          ! Déconnecte toi et ferme toutes tes applications en cours !

          Double-clique sur " RSIT.exe " pour le lancer.

          Clic droit sous VISTA (exécuter en tant que…)

          -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

          * Devant l'option "List files/folders created ..." , tu choisis : 2 months

          * clique ensuite sur " Continue " pour lancer l'analyse ...

          -> laisse faire le scan et ne touche pas au PC ...

          Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-notes).

          Poste le contenu de " log.txt " (c'est celui qui apparaît à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

          Important : poste un rapport, puis l'autre dans la réponse suivante ...
          Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum ...
          ( Et si "log.txt" seul, ne passe pas non plus , fais le en 2 fois ... merci ... )

          ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

          @+
      3. Voila le fichier log.txt :

        Logfile of random's system information tool 1.06 (written by random/random)
        Run by Tustus at 2009-09-26 12:59:33
        Microsoft Windows XP Édition familiale Service Pack 3
        System drive C: has 39 GB (27%) free of 145 GB
        Total RAM: 1023 MB (27% free)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 22:54:03, on 25/09/2009
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v8.00 (8.00.6001.18702)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
        C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
        C:\Program Files\Norton Internet Security\ISSVC.exe
        C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
        C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
        C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
        C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
        C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
        C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
        C:\Program Files\Windows Live\Family Safety\fsssvc.exe
        c:\APPS\HIDSERVICE\HIDSERVICE.exe
        C:\Program Files\Java\jre6\bin\jqs.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
        C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\Apps\Softex\OmniPass\Omniserv.exe
        C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
        C:\Program Files\AxBx\VirusKeeper 2010 Pro Evaluation\vk_service.exe
        c:\APPS\Powercinema\Kernel\TV\CLSched.exe
        C:\Apps\Softex\OmniPass\OPXPApp.exe
        C:\WINDOWS\Explorer.EXE
        C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
        C:\PROGRA~1\Wanadoo\CnxMon.exe
        C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
        C:\Program Files\Java\jre6\bin\jusched.exe
        C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
        C:\WINDOWS\SOUNDMAN.EXE
        C:\Apps\Powercinema\PCMService.exe
        C:\Apps\Softex\OmniPass\scureapp.exe
        C:\Program Files\MIC\HAWAII\Hawaii.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
        C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
        C:\Program Files\Fingerprint Sensor\ATSwpNav.exe
        C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
        C:\Program Files\Windows Live\Family Safety\fsui.exe
        C:\Program Files\MessengerPlus! 3\MsgPlus.exe
        C:\Program Files\AxBx\VirusKeeper 2010 Pro Evaluation\VirusKeeper.exe
        C:\PROGRA~1\Wanadoo\ComComp.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\PROGRA~1\Wanadoo\Watch.exe
        C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
        C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
        C:\Program Files\Internet Explorer\IEXPLORE.EXE
        C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
        C:\Program Files\Internet Explorer\IEXPLORE.EXE
        C:\Program Files\Uniblue\RegistryBooster 2009\registrybooster.exe
        C:\Program Files\Windows Live\Toolbar\wltuser.exe
        C:\Program Files\AxBx\VirusKeeper 2010 Pro Evaluation\vk_watchop.exe
        C:\Program Files\Internet Explorer\IEXPLORE.EXE
        C:\Program Files\Messenger\msmsgs.exe
        D:\Documents and Settings\Tustus\Bureau\HiJackThis.exe

        O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
        O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
        O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
        O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omniserv.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
        O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
        O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
        O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
        O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - AxBx - C:\Program Files\AxBx\VirusKeeper 2010 Pro Evaluation\vk_service.exe
        1. Le début de info.txt :

          info.txt logfile of random's system information tool 1.06 2009-09-26 13:00:05

          ======Uninstall list======

          -->"C:\Program Files\Fichiers communs\aolshare\Coach\AolCInUn.exe" -lang="fr-fr"
          -->C:\PROGRA~1\GOTOSO~1\VADERE~1\UNWISE.EXE C:\PROGRA~1\GOTOSO~1\VADERE~1\INSTALL.LOG
          -->C:\PROGRA~1\Norman\NORMAN~1\UNWISE.EXE C:\PROGRA~1\Norman\NORMAN~1\INSTALL.LOG
          -->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
          -->C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe
          -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
          -->C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VCSetup.exe /REMOVE
          -->C:\Program Files\Fichiers communs\Symantec Shared\SymSetup\{A93C9E60-29B6-49da-BA21-F70AC6AADE20}.exe /X
          -->C:\Program Files\Learn2.com\StRunner\stuninst.exe
          -->C:\Program Files\MIC\HAWAII\uninst.exe
          -->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
          -->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
          -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
          -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
          -->C:\WINDOWS\UNIN040C.EXE -f"C:\Program Files\PhotoDeluxe HE 3.1\DeIsL1.isu"
          -->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
          -->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
          -->MsiExec.exe /I{8B543A39-9401-44F4-B572-069E64C15189}
          -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.EXE" -uninstall
          -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F9CFBD8-8F77-4DCD-8CB5-CDD5F653C872}\setup.exe" -l0x40c
          -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4F1DA6BF-3614-48A1-9970-9E90F646789E}\setup.exe" -l0x40c
          -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5A065EA0-0EEC-4E94-A2A0-40812576C122}\setup.exe" -l0x40c
          -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
          -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x40c
          -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F4E57F49-84B4-4CF2-B0A1-8CA1752BDF7E}\setup.exe" -l0x40c
          -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0A32C786-85DE-48F8-9E54-848B3E34A90C}\setup.exe" -l0x40c -removeonly
          -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
          2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
          2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
          2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
          2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
          2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
          2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
          2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
          2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
          2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
          2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
          2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
          ACDSee 8-->MsiExec.exe /I{DD54C6DE-B787-406D-A5A7-A49E0471E45B}
          Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
          Adobe Reader 8.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
          Ahead Nero - Burning Rom-->C:\WINDOWS\UNNERO.exe /UNINSTALL
          aMSN 0.97RC1-->C:\Program Files\aMSN\uninstall.exe
          Apple Mobile Device Support-->MsiExec.exe /I{D8AB8F0C-CEEB-4A29-8EF5-219B064813F4}
          Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
          Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
          Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
          ATNavigation-->MsiExec.exe /I{FB159DD9-6E5F-4C94-B288-E9D1D9FAFBA1}
          Audacity 1.3.7 (Unicode)-->"C:\Program Files\Audacity 1.3 Beta (Unicode)\unins000.exe"
          CamfrogWEB Advanced ActiveX Plugin (remove only)-->"C:\Program Files\CFWebAdvancedU\Uninstall.exe"
          CardRd81-->MsiExec.exe /I{54C8FE84-89C4-40E8-976C-439EB0729BD6}
          CC_ccProxyExt-->MsiExec.exe /I{DA42FDCA-7C5A-43EF-9A05-CCE148ADF919}
          ccCommon-->MsiExec.exe /I{DC367608-64A7-4BF7-92F4-8BAA25BA02DB}
          CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
          ccPxyCore-->MsiExec.exe /I{FC08587A-4F01-4188-819F-F55880022917}
          CCScore-->MsiExec.exe /I{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}
          Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
          Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
          Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
          Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
          Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
          Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
          Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
          CR2-->MsiExec.exe /I{432C3720-37BF-4BD7-8E49-F38E090246D0}
          dBpoweramp Musepack Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Musepack Codec.dat
          dBpoweramp Music Converter-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Music Converter.dat
          EasyBail® 2008-->MsiExec.exe /I{D12261D7-A778-4CDB-B515-3FA900AC5D30}
          eMule-->"C:\Program Files\eMule\Uninstall.exe"
          EPSON CardMonitor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{109D28C7-FB38-483A-9C91-001CB59E2699}\SETUP.EXE" uninst
          EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /r
          EPSON PhotoQuicker3.2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B2EFE303-A594-11D5-95EB-005004BC1C65}\setup.exe" uninst
          EPSON PhotoStarter3.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5983C895-DDA4-45D9-A8D1-877D5DE7693E}\SETUP.EXE" uninst
          EPSON PRINT Image Framer Tool1.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{37D67C45-8484-4398-B5C1-3CAE19FDDF22}\SETUP.EXE" anything
          ESSBrwr-->MsiExec.exe /I{643EAE81-920C-4931-9F0B-4B343B225CA6}
          ESSCDBK-->MsiExec.exe /I{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}
          ESScore-->MsiExec.exe /I{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}
          ESSCT-->MsiExec.exe /I{8BB4B58A-A402-4DE8-8FCD-287E60B88DD8}
          ESSEMAIL-->MsiExec.exe /I{FEDE2483-87B7-44C1-A5BB-D75AEB8B6340}
          ESSgui-->MsiExec.exe /I{91517631-A9F3-4B7C-B482-43E0068FD55A}
          ESShelp-->MsiExec.exe /I{87843A41-7808-4F2E-B13F-25C1E67CF2FD}
          ESSini-->MsiExec.exe /I{8E92D746-CD9F-4B90-9668-42B74C14F765}
          ESSPCD-->MsiExec.exe /I{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}
          ESSPDock-->MsiExec.exe /I{FCDB1C92-03C6-4C76-8625-371224256091}
          ESSSONIC-->MsiExec.exe /I{4F677FC7-7AA8-412B-A957-F13CBE1C7331}
          ESSTOOLS-->MsiExec.exe /I{8A502E38-29C9-49FA-BCFA-D727CA062589}
          essvcpt-->MsiExec.exe /I{D1973749-F5E7-40EB-B528-F2B78685B9FF}
          ESSvpaht-->MsiExec.exe /I{A5B3EB8A-4071-42F0-8E8E-7A8342AA8E69}
          ESSvpot-->MsiExec.exe /I{48C82F7A-F100-4DAB-A310-8E18BF2159E1}
          Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
          GamesBar 2.0.1.12-->C:\Program Files\GamesBar\uninst.exe
          Gestion Immobilière 2007 v3.3-->"C:\Program Files\Emjysoft\Gestion Immobilière\unins000.exe"
          Gestion Immobilière 2008 v4.2-->"C:\Program Files\Emjysoft\gestion_immo\unins000.exe"
          Google Chrome-->"C:\Program Files\Google\Chrome\Application\2.0.172.43\Installer\setup.exe" --uninstall --system-level
          Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall
          Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
          Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
          HijackThis 2.0.2-->"D:\Documents and Settings\Tustus\Bureau\HijackThis.exe" /uninstall
          HLPIndex-->MsiExec.exe /I{38441BE7-79B0-42B8-8297-833704F949FE}
          HLPPDOCK-->MsiExec.exe /I{154508C0-07C5-4659-A7A0-E49968750D21}
          HLPSFO-->MsiExec.exe /I{8DD94CA3-BCD2-49C0-B537-F3B5D95FF0C8}
          Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
          Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
          Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
          HP Customer Participation Program 7.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
          HP Imaging Device Functions 7.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
          HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70}
          HP Photosmart, Officejet and Deskjet 7.0.A-->C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat
          HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
          HP Solution Center 7.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
          Ink-->MsiExec.exe /I{9FCB2876-554D-491D-A2CD-58F8252D6C64}
          Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
          Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
          iPlayer Mass Storage Driver V3.1 -->C:\WINDOWS\iun6002.exe "C:\Program Files\iPlayer Mass Storage Driver V3.1\irunin.ini"
          J2SE Development Kit 5.0 Update 6-->MsiExec.exe /I{32A3A4F4-B792-11D6-A78A-00B0D0150060}
          J2SE Runtime Environment 5.0 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150020}
          J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
          Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
          Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
          Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
          Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
          Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
          Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
          K-Lite Codec Pack 4.7.5 (Full)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
          KSU-->MsiExec.exe /I{B997C2A0-4383-41BF-B76E-9B8B7ECFB267}
          Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
          LocationsAssistance-->"C:\Program Files\LocationsAssistance\unins000.exe"
          Logiciel Kodak EasyShare-->D:\Documents and Settings\All Users\Application Data\Kodak\EasyShareSetup\$SETUP_190007_24636\Setup.exe /APR-REMOVE
          Ma-Config.com plugin-->MsiExec.exe /I{6F06A42D-525C-49ED-8622-E16790956CD8}
          Macromedia Shockwave Player-->MsiExec.exe /X{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
          Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
          Messenger Plus! 3-->"C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /Remove
          Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
          Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
          Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
          Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
          Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
          Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
          Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
          Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
          Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
          Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
          Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
          Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
          Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
          Microsoft Office Excel Viewer 2003-->MsiExec.exe /I{9084040C-6000-11D3-8CFE-0150048383C9}
          Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
          Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
          Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-040C-0000-0000000FF1CE}
          Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
          Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
          Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
          Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
          Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
          Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
          Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
          Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
          Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
          Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
          Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
          Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
          Microsoft Office Standard 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall STANDARD /dll OSETUP.DLL
          Microsoft Office Standard 2007-->MsiExec.exe /X{90120000-0012-0000-0000-0000000FF1CE}
          Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
          Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
          Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
          Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
          Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
          Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
          Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
          mIRC-->"C:\ts2-7\mirc.exe" -uninstall
          1. La suite...

            Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour le Codeur Windows Media (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
            Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
            Mise à jour pour Windows Internet Explorer 8 (KB971930)-->"C:\WINDOWS\ie8updates\KB971930-IE8\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
            Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
            Modem DSL ECI Telecom-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C7B39B40-52C3-11D4-AFCE-00E0B8138A4A}\setup.exe" -l0x40c REMOVE
            Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
            Mozilla Firefox (3.0.1)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
            MSN Reaper-->"C:\Program Files\MSN Reaper\uninst.exe"
            MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
            MSRedist-->MsiExec.exe /I{B7C61755-DB48-4003-948F-3D34DB8EAF69}
            MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
            MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
            MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
            MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
            Norton AntiSpam-->MsiExec.exe /I{3B29A786-5803-4e9e-9B58-3014A5B4E519}
            Norton AntiSpam-->MsiExec.exe /I{5677563D-0CB1-485f-9E18-C5025306BB3F}
            Norton AntiVirus 2005-->MsiExec.exe /X{C6F5B6CF-609C-428E-876F-CA83176C021B}
            Norton Internet Security-->MsiExec.exe /I{12E2B9E9-05B1-407d-B0FD-B5F350535125}
            Norton Internet Security-->MsiExec.exe /I{449F3A9E-9903-4a0d-A209-08030D45A935}
            Norton Internet Security-->MsiExec.exe /I{48185814-A224-447a-81DA-71BD20580E1B}
            Norton Internet Security-->MsiExec.exe /I{526AD5DC-CFC4-4f2a-8442-C84CC91D6C7F}
            Norton Internet Security-->MsiExec.exe /I{A93C9E60-29B6-49da-BA21-F70AC6AADE20}
            Norton Internet Security-->MsiExec.exe /I{C9D599E1-6B68-4a1f-8A4F-A1DB433DB1BF}
            Norton Internet Security-->MsiExec.exe /I{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}
            Norton Internet Security-->MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
            Norton Internet Security-->MsiExec.exe /I{FC2C0536-583C-46c0-844A-62CECAE01F22}
            Norton WMI Update-->MsiExec.exe /X{E85FA9A1-C241-4698-893B-DD99509B8DB0}
            Norton WMI Update-->MsiExec.exe /X{F64306A5-4C32-41bb-B153-53986527FAB4}
            Notifier-->MsiExec.exe /I{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}
            NVIDIA Drivers-->C:\WINDOWS\system32\NVUNINST.EXE UninstallGUI
            OCR Software by I.R.I.S 7.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
            OfotoXMI-->MsiExec.exe /I{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}
            OpenOffice.org 2.0-->MsiExec.exe /I{E2055AB2-D1C7-4147-A384-2B4B1C04282B}
            OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}
            OTtBP-->MsiExec.exe /I{F71760CD-0F8B-4DCC-B7B7-6B223CC3843C}
            OTtBPSDK-->MsiExec.exe /I{3CA39B0C-BA85-4D42-AC0F-1FF5F60C3353}
            Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
            Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
            PhotoBox 3.2.5-->"C:\Program Files\PhotoBox\uninstall.exe"
            Picasa 2-->"C:\Program Files\Picasa2\Uninstall.exe"
            Poseidon For UML CE 2.6-->"C:\Program Files\Poseidon For UML CE 2.6\UninstallerData\Uninstall Poseidon For UML CE 2.6.exe"
            QuickTime-->MsiExec.exe /I{08094E03-AFE4-4853-9D31-6D0743DF5328}
            RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
            Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\Setup.exe" -l0x40c -removeonly
            Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
            Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
            Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
            Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
            Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
            Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
            Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
            Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
            Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
            Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
            Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
            Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
            SereneScreen Marine Aquarium 2-->"C:\Program Files\SereneScreen\Marine Aquarium 2\unins000.exe"
            SFR-->MsiExec.exe /I{DB02F716-6275-42E9-B8D2-83BA2BF5100B}
            SFR2-->MsiExec.exe /I{A0AF08BA-3630-4505-BFB2-A41F3837B0D0}
            SHASTA-->MsiExec.exe /I{605A4E39-613C-4A12-B56F-DEFBE6757237}
            SKIN0001-->MsiExec.exe /I{FDF9943A-3D5C-46B3-9679-586BD237DDEE}
            SKINXSDK-->MsiExec.exe /I{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}
            Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
            Sonic MyDVD-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
            Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
            SPBBC-->MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
            SpeedTouch USB Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}\setup.exe" /l040c -Control_Panel
            Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
            SpyHunter-->"C:\Program Files\Enigma Software Group\SpyHunter\Uninstall.exe" "C:\Program Files\Enigma Software Group\SpyHunter\install.log" -u
            StuffPlug 3-->C:\Program Files\StuffPlug3\Uninstall.exe
            SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
            SymNet-->MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}
            Taliessin script v2-7-->c:\ts2-7\Uninstal.exe
            TerraExplorer-->C:\Program Files\Skyline\TerraExplorer\Setup.exe [OP]/U
            Top Congés 3.0.5.0-->"C:\Program Files\Top Conges\unins000.exe"
            Uniblue RegistryBooster 2009-->"C:\Program Files\Uniblue\RegistryBooster 2009\unins000.exe"
            Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
            Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
            Update for Microsoft Office Outlook 2007 (KB969907)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {74F98B24-AFBD-4800-9BD6-87D349B5C462}
            Update for Outlook 2007 Junk Email Filter (kb973514)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {03B11C77-336F-43B4-9B43-79890BA84504}
            USB Video Camera Driver v1.10-->MsiExec.exe /I{926B578B-505F-4820-A62D-088E1124FED4}
            User Agent String Utility-->MsiExec.exe /I{9DF095E1-8EC2-4892-8740-93769DB1E944}
            VirusKeeper 2010 Pro Evaluation-->"C:\Program Files\AxBx\VirusKeeper 2010 Pro Evaluation\unins000.exe"
            VPRINTOL-->MsiExec.exe /I{999D43F4-9709-4887-9B1A-83EBB15A8370}
            Wanadoo Messager-->C:\PROGRA~1\WANADO~1\UNWISE.EXE C:\PROGRA~1\WANADO~1\INSTALL.LOG
            Wanadoo-->C:\PROGRA~1\Wanadoo\Shell.exe desinstall.shl
            Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
            Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
            Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
            Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
            Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
            Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
            Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
            Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
            Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
            Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
            Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
            Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
            Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
            Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
            WIRELESS-->MsiExec.exe /I{F9593CFB-D836-49BC-BFF1-0E669A411D9F}
            1. =====HijackThis Backups=====

              O1 - Hosts: 206.53.61.77 google.com.tw [2009-09-22]
              O1 - Hosts: 74.125.45.100 paysoftbillsolution.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.az [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.cd [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.rw [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.fm [2009-09-22]
              O1 - Hosts: 74.125.45.100 getantivirusplusnow.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.kr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ro [2009-09-22]
              O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.na [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ae [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ca [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.qa [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ws [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.us [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.ng [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.pl [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.sg [2009-09-22]
              O1 - Hosts: 74.125.45.100 4-open-davinci.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.it [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.za [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.mx [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.nf [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.nz [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.fi [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.tm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.dk [2009-09-22]
              O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.tj [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.nl [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.bs [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.nr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ch [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.in [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.sh [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.gm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ma [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.la [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.si [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.np [2009-09-22]
              O1 - Hosts: 74.125.45.100 secure-plus-payments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.li [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.in [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.ck [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ms [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.sn [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.as [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.pt [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.ls [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.getavplusnow.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.pn [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.dj [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.ma [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.no [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.tz [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ht [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.nu [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.gr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.sm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.my [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.dm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.jp [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ge [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.tt [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.il [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ba [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.ug [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.pr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ru [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.mu [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ki [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.id [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.be [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.af [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.jm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.at [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.fr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.gg [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.sc [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.zm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.tl [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.hk [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.lv [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.bg [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.st [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.uk [2009-09-22]
              O1 - Hosts: 74.125.45.100 privatesecuredpayments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.se [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.de [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.im [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ee [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.vu [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ie [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.mw [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.gh [2009-09-22]
              O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll [2009-09-22]
              O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll [2009-09-22]
              O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll [2009-09-22]
              O16 - DPF: {0878F049-D33E-45E0-A157-C36A6683CF25} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1063_XP.cab [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.na [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.np [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.nz [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.sm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.gg [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.jp [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.in [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.dm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.fr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.lv [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ge [2009-09-22]
              O1 - Hosts: 74.125.45.100 secure-plus-payments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.li [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ht [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.gm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.fm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.si [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.tz [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.tm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.sc [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.sh [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.jm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.id [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.as [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.nf [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.us [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.il [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.im [2009-09-22]
              O1 - Hosts: 74.125.45.100 privatesecuredpayments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.cd [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.tl [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.tt [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.my [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.dj [2009-09-22]
              O1 - Hosts: 74.125.45.100 4-open-davinci.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.pr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.bg [2009-09-22]
              O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.sn [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ru [2009-09-22]
              O1 - Hosts: 74.125.45.100 getantivirusplusnow.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.in [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.pt [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.bs [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.se [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ie [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.tw [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.vu [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.nu [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ki [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.zm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.at [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.az [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ma [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.uk [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.za [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.la [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.mw [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.ls [2009-09-22]
              O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.fi [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ae [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.de [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.ug [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.kr [2009-09-22]
              O1 - Hosts: 74.125.45.100 paysoftbillsolution.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.qa [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.pl [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.it [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.nr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ba [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.ma [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.no [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.dk [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.mu [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.getavplusnow.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ee [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ca [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.gh [2009-09-22]
              O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.sg [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ws [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ro [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ch [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.nl [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.tj [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.ck [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.af [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.gr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.rw [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.hk [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.st [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.ng [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.pn [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ms [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.mx [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.be [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.id [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.gm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.tl [2009-09-22]
              O1 - Hosts: 74.125.45.100 getantivirusplusnow.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ca [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.ls [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.mu [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.sn [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ie [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.be [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.lv [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.tz [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.ma [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.at [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.pn [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ae [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.za [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.sg [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.jm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.jp [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.my [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.az [2009-09-22]
              O1 - Hosts: 74.125.45.100 paysoftbillsolution.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ru [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.dk [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.gh [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.li [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ma [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.in [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ge [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ht [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.pr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.nr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.na [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ws [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.bs [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.as [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.sh [2009-09-22]
              O1 - Hosts: 74.125.45.100 privatesecuredpayments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.sm [2009-09-22]
              O1 - Hosts: 74.125.45.100 secure-plus-payments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.np [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.mw [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.gr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.fr [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ba [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.pl [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.ug [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.mx [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.fm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.hk [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ch [2009-09-22]
              O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.la [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.tm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.bg [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.cd [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.ng [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.nu [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.si [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.st [2009-09-22]
              O1 - Hosts: 74.125.45.100 4-open-davinci.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.af [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.tj [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.kr [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.gg [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.dm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.tt [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.dj [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ee [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.im [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.us [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.se [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.qa [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.uk [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.tw [2009-09-22]
              O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.rw [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.pt [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.com.nf [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.vu [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.ck [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.no [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ro [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ms [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.ki [2009-09-22]
              O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.fi [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.sc [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.in [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.it [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.de [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.nz [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.getavplusnow.com [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.il [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.co.zm [2009-09-22]
              O1 - Hosts: 206.53.61.77 google.nl [2009-09-22]
              O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 privatesecuredpayments.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 4-open-davinci.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 getantivirusplusnow.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 secure-plus-payments.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 paysoftbillsolution.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.getavplusnow.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com [2009-09-22]
              O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com [2009-09-22]
              O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\oberontb.dll [2009-09-22]
              O4 - HKLM\..\Run: [GsiFinal] rundll32 gspndll.dll,postInstall final [2009-09-22]
              O4 - HKLM\..\Run: [Fork Help Free 64] D:\Documents and Settings\All Users\Application Data\Live Bind Fork Help\ProcLoud.exe [2009-09-22]
              O4 - HKLM\..\RunServices: [Windows Layer] pekjsk.exe [2009-09-22]
              O4 - HKCU\..\Run: [Windows Layer] pekjsk.exe [2009-09-22]
              O16 - DPF: {AE2B937E-EA7D-4A8D-888C-B68D7F72A3C4} (IPSUploader4 Control) - http://photoservice.fujicolor.de/ips-opdata/operator/27859021/activex/IPSUploader4.cab [2009-09-22]
              O4 - Startup: Outil de notification Live Search.lnk = D:\Documents and Settings\Tustus\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe [2009-09-22]
              O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] (User 'Default user') [2009-09-22]
              O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] (User 'SYSTEM') [2009-09-22]
              O23 - Service: MYS Mutex Algorithm Service - Unknown owner - C:\WINDOWS\system\mysmas.exe (file missing) [2009-09-22]
              R3 - URLSearchHook: peer2Peer-FR2 Toolbar - {9f23e207-7e05-4ee2-a90e-50cf3ae9b03f} - C:\Program Files\peer2Peer-FR2\tbpee0.dll (file missing) [2009-09-22]
              O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) [2009-09-24]
              O3 - Toolbar: peer2Peer-FR2 Toolbar - {9f23e207-7e05-4ee2-a90e-50cf3ae9b03f} - C:\Program Files\peer2Peer-FR2\tbpee0.dll (file missing) [2009-09-24]
              O3 - Toolbar: Barre d'outils MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fr\msntb.dll (file missing) [2009-09-24]
              O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU) [2009-09-24]
              O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe [2009-09-25]
              O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab [2009-09-25]
              O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB [2009-09-25]
              1. ======Hosts File======

                127.0.0.1 bin.errorprotector.com ## added by CiD
                127.0.0.1 br.errorsafe.com ## added by CiD
                127.0.0.1 br.winfixer.com ## added by CiD
                127.0.0.1 cdn.drivecleaner.com ## added by CiD
                127.0.0.1 cdn.errorsafe.com ## added by CiD
                127.0.0.1 cdn.winsoftware.com ## added by CiD
                127.0.0.1 de.errorsafe.com ## added by CiD
                127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
                127.0.0.1 download.cdn.errorsafe.com ## added by CiD
                127.0.0.1 download.cdn.winsoftware.com ## added by CiD

                ======Security center information======

                AV: Norton Internet Security (outdated)
                AV: VirusKeeper 2010 Pro antivirus
                FW: Norton Internet Security

                ======System event log======

                Computer Name: tuswoman
                Event Code: 7035
                Message: Un contrôle Démarrer a correctement été envoyé au service Pml Driver HPZ12.

                Record Number: 8676229
                Source Name: Service Control Manager
                Time Written: 20090926113939.000000+120
                Event Type: Informations
                User: tuswoman\Tustus

                Computer Name: tuswoman
                Event Code: 7036
                Message: Le service Pml Driver HPZ12 est entré dans l'état : arrêté.

                Record Number: 8676228
                Source Name: Service Control Manager
                Time Written: 20090926113934.000000+120
                Event Type: Informations
                User:

                Computer Name: tuswoman
                Event Code: 7036
                Message: Le service Pml Driver HPZ12 est entré dans l'état : en cours d'exécution.

                Record Number: 8676227
                Source Name: Service Control Manager
                Time Written: 20090926113934.000000+120
                Event Type: Informations
                User:

                Computer Name: tuswoman
                Event Code: 7035
                Message: Un contrôle Démarrer a correctement été envoyé au service Pml Driver HPZ12.

                Record Number: 8676226
                Source Name: Service Control Manager
                Time Written: 20090926113934.000000+120
                Event Type: Informations
                User: tuswoman\Tustus

                Computer Name: tuswoman
                Event Code: 7036
                Message: Le service Pml Driver HPZ12 est entré dans l'état : arrêté.

                Record Number: 8676225
                Source Name: Service Control Manager
                Time Written: 20090926113929.000000+120
                Event Type: Informations
                User:

                =====Application event log=====

                Computer Name: tuswoman
                Event Code: 2002
                Message:
                Record Number: 10347
                Source Name: EAPOL
                Time Written: 20090821222813.000000+120
                Event Type: Informations
                User:

                Computer Name: tuswoman
                Event Code: 2003
                Message:
                Record Number: 10346
                Source Name: EAPOL
                Time Written: 20090821222813.000000+120
                Event Type: Informations
                User:

                Computer Name: tuswoman
                Event Code: 0
                Message:
                Record Number: 10345
                Source Name: gusvc
                Time Written: 20090821205711.000000+120
                Event Type: Informations
                User:

                Computer Name: tuswoman
                Event Code: 0
                Message:
                Record Number: 10344
                Source Name: gusvc
                Time Written: 20090821205600.000000+120
                Event Type: Informations
                User:

                Computer Name: tuswoman
                Event Code: 2002
                Message:
                Record Number: 10343
                Source Name: EAPOL
                Time Written: 20090821204724.000000+120
                Event Type: Informations
                User:

                =====Security event log=====

                Computer Name: tuswoman
                Event Code: 849
                Message: Une application générait une erreur d'exception lorsque le Pare-feu Windows a démarré.

                Origine de la stratégie : Stratégie locale

                Profil utilisé : Standard

                Nom : hpqcopy.exe

                Chemin d'accès : C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe

                État : Activé

                Étendue : Tous les sous-réseaux

                Record Number: 72428
                Source Name: Security
                Time Written: 20090924160228.000000+120
                Event Type: Succès de l'audit
                User: AUTORITE NT\SYSTEM

                Computer Name: tuswoman
                Event Code: 849
                Message: Une application générait une erreur d'exception lorsque le Pare-feu Windows a démarré.

                Origine de la stratégie : Stratégie locale

                Profil utilisé : Standard

                Nom : hposid01.exe

                Chemin d'accès : C:\Program Files\HP\Digital Imaging\bin\hposid01.exe

                État : Activé

                Étendue : Tous les sous-réseaux

                Record Number: 72427
                Source Name: Security
                Time Written: 20090924160228.000000+120
                Event Type: Succès de l'audit
                User: AUTORITE NT\SYSTEM

                Computer Name: tuswoman
                Event Code: 849
                Message: Une application générait une erreur d'exception lorsque le Pare-feu Windows a démarré.

                Origine de la stratégie : Stratégie locale

                Profil utilisé : Standard

                Nom : hposfx08.exe

                Chemin d'accès : C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe

                État : Activé

                Étendue : Tous les sous-réseaux

                Record Number: 72426
                Source Name: Security
                Time Written: 20090924160228.000000+120
                Event Type: Succès de l'audit
                User: AUTORITE NT\SYSTEM

                Computer Name: tuswoman
                Event Code: 849
                Message: Une application générait une erreur d'exception lorsque le Pare-feu Windows a démarré.

                Origine de la stratégie : Stratégie locale

                Profil utilisé : Standard

                Nom : hpofxm08.exe

                Chemin d'accès : C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe

                État : Activé

                Étendue : Tous les sous-réseaux

                Record Number: 72425
                Source Name: Security
                Time Written: 20090924160228.000000+120
                Event Type: Succès de l'audit
                User: AUTORITE NT\SYSTEM

                Computer Name: tuswoman
                Event Code: 849
                Message: Une application générait une erreur d'exception lorsque le Pare-feu Windows a démarré.

                Origine de la stratégie : Stratégie locale

                Profil utilisé : Standard

                Nom : hpoews01.exe

                Chemin d'accès : C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe

                État : Activé

                Étendue : Tous les sous-réseaux

                Record Number: 72424
                Source Name: Security
                Time Written: 20090924160228.000000+120
                Event Type: Succès de l'audit
                User: AUTORITE NT\SYSTEM

                ======Environment variables======

                "ComSpec"=%SystemRoot%\system32\cmd.exe
                "FP_NO_HOST_CHECK"=NO
                "NUMBER_OF_PROCESSORS"=1
                "OS"=Windows_NT
                "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Apps\Softex\OmniPass;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\Java\jdk1.5.0_06\bin; ;C:\Program Files\K-Lite Codec Pack\QuickTime\QTSystem
                "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
                "PROCESSOR_ARCHITECTURE"=x86
                "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 39 Stepping 1, AuthenticAMD
                "PROCESSOR_LEVEL"=15
                "PROCESSOR_REVISION"=2701
                "TEMP"=%SystemRoot%\TEMP
                "TMP"=%SystemRoot%\TEMP
                "windir"=%SystemRoot%
                "CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
                "QTJAVA"=C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip

                -----------------EOF-----------------
                1. Bonjour

                  Commence par restaurer tout ce que tu as effacer avec Hijackthis.
                  On verra après
              2. C est bon j ai tout restauré. Que dois je faire ensuite??
                1. Re

                  Poste un RSIT stp merci
                  @+
              3. Le log.txt :

                Logfile of random's system information tool 1.06 (written by random/random)
                Run by Tustus at 2009-09-26 17:10:41
                Microsoft Windows XP Édition familiale Service Pack 3
                System drive C: has 39 GB (27%) free of 145 GB
                Total RAM: 1023 MB (11% free)

                Logfile of Trend Micro HijackThis v2.0.2
                Scan saved at 17:11:50, on 26/09/2009
                Platform: Windows XP SP3 (WinNT 5.01.2600)
                MSIE: Internet Explorer v8.00 (8.00.6001.18702)
                Boot mode: Normal

                Running processes:
                C:\WINDOWS\System32\smss.exe
                C:\WINDOWS\system32\csrss.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\services.exe
                C:\WINDOWS\system32\lsass.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\System32\svchost.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\system32\svchost.exe
                C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
                C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
                C:\Program Files\Norton Internet Security\ISSVC.exe
                C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
                C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
                C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                C:\WINDOWS\system32\spoolsv.exe
                C:\WINDOWS\system32\svchost.exe
                C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
                C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
                C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
                C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
                C:\Program Files\Windows Live\Family Safety\fsssvc.exe
                c:\APPS\HIDSERVICE\HIDSERVICE.exe
                C:\Program Files\Java\jre6\bin\jqs.exe
                C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
                C:\WINDOWS\system32\nvsvc32.exe
                C:\Apps\Softex\OmniPass\Omniserv.exe
                C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
                C:\WINDOWS\system32\svchost.exe
                C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
                C:\Program Files\AxBx\VirusKeeper 2010 Pro Evaluation\vk_service.exe
                c:\APPS\Powercinema\Kernel\TV\CLSched.exe
                C:\Apps\Softex\OmniPass\OPXPApp.exe
                C:\WINDOWS\System32\alg.exe
                C:\WINDOWS\system32\wbem\wmiapsrv.exe
                C:\WINDOWS\system32\wbem\wmiprvse.exe
                C:\WINDOWS\Explorer.EXE
                C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
                C:\PROGRA~1\Wanadoo\CnxMon.exe
                C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
                C:\Program Files\Java\jre6\bin\jusched.exe
                C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
                C:\WINDOWS\SOUNDMAN.EXE
                C:\Apps\Powercinema\PCMService.exe
                C:\Apps\Softex\OmniPass\scureapp.exe
                C:\Program Files\MIC\HAWAII\Hawaii.exe
                C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
                C:\WINDOWS\system32\wuauclt.exe
                C:\Program Files\Fingerprint Sensor\ATSwpNav.exe
                C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                C:\Program Files\Windows Live\Family Safety\fsui.exe
                C:\Program Files\MessengerPlus! 3\MsgPlus.exe
                C:\WINDOWS\system32\ctfmon.exe
                C:\Program Files\AxBx\VirusKeeper 2010 Pro Evaluation\VirusKeeper.exe
                C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe
                C:\WINDOWS\system32\rundll32.exe
                C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
                C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
                C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
                C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                C:\Program Files\Messenger\msmsgs.exe
                D:\Documents and Settings\Tustus\Bureau\RSIT.exe
                C:\WINDOWS\system32\wbem\wmiprvse.exe
                D:\Documents and Settings\Tustus\Bureau\Tustus.exe

                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
                R3 - URLSearchHook: (no name) - {9f23e207-7e05-4ee2-a90e-50cf3ae9b03f} - (no file)
                O1 - Hosts: 74.125.45.100 4-open-davinci.com
                O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com
                O1 - Hosts: 74.125.45.100 privatesecuredpayments.com
                O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com
                O1 - Hosts: 74.125.45.100 getantivirusplusnow.com
                O1 - Hosts: 74.125.45.100 secure-plus-payments.com
                O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com
                O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com
                O1 - Hosts: 74.125.45.100 www.getavplusnow.com
                O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com
                O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com
                O1 - Hosts: 74.125.45.100 paysoftbillsolution.com
                O1 - Hosts: 206.53.61.77 google.ae
                O1 - Hosts: 206.53.61.77 google.as
                O1 - Hosts: 206.53.61.77 google.at
                O1 - Hosts: 206.53.61.77 google.az
                O1 - Hosts: 206.53.61.77 google.ba
                O1 - Hosts: 206.53.61.77 google.be
                O1 - Hosts: 206.53.61.77 google.bg
                O1 - Hosts: 206.53.61.77 google.bs
                O1 - Hosts: 206.53.61.77 google.ca
                O1 - Hosts: 206.53.61.77 google.cd
                O1 - Hosts: 206.53.61.77 google.com.gh
                O1 - Hosts: 206.53.61.77 google.com.hk
                O1 - Hosts: 206.53.61.77 google.com.jm
                O1 - Hosts: 206.53.61.77 google.com.mx
                O1 - Hosts: 206.53.61.77 google.com.my
                O1 - Hosts: 206.53.61.77 google.com.na
                O1 - Hosts: 206.53.61.77 google.com.nf
                O1 - Hosts: 206.53.61.77 google.com.ng
                O1 - Hosts: 206.53.61.77 google.ch
                O1 - Hosts: 206.53.61.77 google.com.np
                O1 - Hosts: 206.53.61.77 google.com.pr
                O1 - Hosts: 206.53.61.77 google.com.qa
                O1 - Hosts: 206.53.61.77 google.com.sg
                O1 - Hosts: 206.53.61.77 google.com.tj
                O1 - Hosts: 206.53.61.77 google.com.tw
                O1 - Hosts: 206.53.61.77 google.dj
                O1 - Hosts: 206.53.61.77 google.de
                O1 - Hosts: 206.53.61.77 google.dk
                O1 - Hosts: 206.53.61.77 google.dm
                O1 - Hosts: 206.53.61.77 google.ee
                O1 - Hosts: 206.53.61.77 google.fi
                O1 - Hosts: 206.53.61.77 google.fm
                O1 - Hosts: 206.53.61.77 google.fr
                O1 - Hosts: 206.53.61.77 google.ge
                O1 - Hosts: 206.53.61.77 google.gg
                O1 - Hosts: 206.53.61.77 google.gm
                O1 - Hosts: 206.53.61.77 google.gr
                O1 - Hosts: 206.53.61.77 google.ht
                O1 - Hosts: 206.53.61.77 google.ie
                O1 - Hosts: 206.53.61.77 google.im
                O1 - Hosts: 206.53.61.77 google.in
                O1 - Hosts: 206.53.61.77 google.it
                O1 - Hosts: 206.53.61.77 google.ki
                O1 - Hosts: 206.53.61.77 google.la
                O1 - Hosts: 206.53.61.77 google.li
                O1 - Hosts: 206.53.61.77 google.lv
                O1 - Hosts: 206.53.61.77 google.ma
                O1 - Hosts: 206.53.61.77 google.ms
                O1 - Hosts: 206.53.61.77 google.mu
                O1 - Hosts: 206.53.61.77 google.mw
                O1 - Hosts: 206.53.61.77 google.nl
                O1 - Hosts: 206.53.61.77 google.no
                O1 - Hosts: 206.53.61.77 google.nr
                O1 - Hosts: 206.53.61.77 google.nu
                O1 - Hosts: 206.53.61.77 google.pl
                O1 - Hosts: 206.53.61.77 google.pn
                O1 - Hosts: 206.53.61.77 google.pt
                O1 - Hosts: 206.53.61.77 google.ro
                O1 - Hosts: 206.53.61.77 google.ru
                O1 - Hosts: 206.53.61.77 google.rw
                O1 - Hosts: 206.53.61.77 google.sc
                O1 - Hosts: 206.53.61.77 google.se
                O1 - Hosts: 206.53.61.77 google.sh
                O1 - Hosts: 206.53.61.77 google.si
                O1 - Hosts: 206.53.61.77 google.sm
                O1 - Hosts: 206.53.61.77 google.sn
                O1 - Hosts: 206.53.61.77 google.st
                O1 - Hosts: 206.53.61.77 google.tl
                O1 - Hosts: 206.53.61.77 google.tm
                O1 - Hosts: 206.53.61.77 google.tt
                O1 - Hosts: 206.53.61.77 google.us
                O1 - Hosts: 206.53.61.77 google.vu
                O1 - Hosts: 206.53.61.77 google.ws
                O1 - Hosts: 206.53.61.77 google.co.ck
                O1 - Hosts: 206.53.61.77 google.co.id
                O1 - Hosts: 206.53.61.77 google.co.il
                O1 - Hosts: 206.53.61.77 google.co.in
                O1 - Hosts: 206.53.61.77 google.co.jp
                O1 - Hosts: 206.53.61.77 google.co.kr
                O1 - Hosts: 206.53.61.77 google.co.ls
                O1 - Hosts: 206.53.61.77 google.co.ma
                O1 - Hosts: 206.53.61.77 google.co.nz
                O1 - Hosts: 206.53.61.77 google.co.tz
                O1 - Hosts: 206.53.61.77 google.co.ug
                O1 - Hosts: 206.53.61.77 google.co.uk
                O1 - Hosts: 206.53.61.77 google.co.za
                O1 - Hosts: 206.53.61.77 google.co.zm
                O1 - Hosts: 206.53.61.77 google.com
                O1 - Hosts: 206.53.61.77 google.com.af
                O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
                O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
                O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
                O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
                O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\oberontb.dll
                O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
                O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
                O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                O3 - Toolbar: Barre d'outils MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
                O3 - Toolbar: (no name) - {9f23e207-7e05-4ee2-a90e-50cf3ae9b03f} - (no file)
                O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
                O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
                O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
                O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
                O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
                O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
                O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
                O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
                O4 - HKLM\..\Run: [OmniPass] C:\Apps\Softex\OmniPass\scureapp.exe
                O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                O4 - HKLM\..\Run: [MM_MODULE] C:\Program Files\MIC\HAWAII\Hawaii.exe
                O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
                O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
                O4 - HKLM\..\Run: [ATSwpNav] "C:\Program Files\Fingerprint Sensor\ATSwpNav" -run
                O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
                O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
                O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
                O4 - HKLM\..\Run: [VirusKeeper] C:\Program Files\AxBx\VirusKeeper 2010 Pro Evaluation\VirusKeeper.exe
                O4 - HKLM\..\Run: [SpyHunter Security Suite] C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe
                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                O4 - HKLM\..\Run: [Fork Help Free 64] D:\Documents and Settings\All Users\Application Data\Live Bind Fork Help\ProcLoud.exe
                O4 - HKLM\..\Run: [GsiFinal] rundll32 gspndll.dll,postInstall final
                O4 - HKLM\..\RunServices: [Windows Layer] pekjsk.exe
                O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
                O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
                O4 - HKCU\..\Run: [Windows Layer] pekjsk.exe
                O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] (User 'SYSTEM')
                O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] (User 'Default user')
                O4 - Startup: Outil de notification Live Search.lnk = D:\Documents and Settings\Tustus\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
                O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
                O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
                O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
                O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
                O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.1.14/cfweb_activex.camfrogweb.com-advanced-2.0.1.14_instmodule.exe
                O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
                O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
                O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
                O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
                O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - https://www.photobox.fr/?channel=1005
                O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp10.photoprintit.de/microsite/5450/defaults/activex/IPSUploader.cab
                O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
                O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
                O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
                O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
                O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
                O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
                O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
                O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
                O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
                O23 - Service: Service Google Update (gupdate1c9ece72abbab74) (gupdate1c9ece72abbab74) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
                O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
                O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
                O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
                O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
                O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omniserv.exe
                O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
                O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
                O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
                O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
                O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - AxBx - C:\Program Files\AxBx\VirusKeeper 2010 Pro Evaluation\vk_service.exe
                1. ======Scheduled tasks folder======

                  C:\WINDOWS\tasks\AppleSoftwareUpdate.job
                  C:\WINDOWS\tasks\Google Software Updater.job
                  C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
                  C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
                  C:\WINDOWS\tasks\HDReg.job
                  C:\WINDOWS\tasks\Symantec NetDetect.job

                  ======Registry dump======

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
                  Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
                  Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2009-02-06 61808]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
                  Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
                  Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-01-08 320920]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
                  Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
                  Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-08-26 256112]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
                  Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2009-08-26 761840]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
                  Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-08-26 458736]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CB0D163C-E9F4-4236-9496-0597E24B23A5}]
                  GamesBarBHO Class - C:\Program Files\GamesBar\oberontb.dll [2008-01-06 540672]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
                  Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-01-08 34816]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
                  Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
                  JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-01-08 73728]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
                  {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - Norton Internet Security - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll [2004-11-17 103552]
                  {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Norton AntiVirus - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll [2004-11-15 218240]
                  {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
                  {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-08-26 256112]
                  {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - []
                  {9f23e207-7e05-4ee2-a90e-50cf3ae9b03f}
                  {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - GamesBar - C:\Program Files\GamesBar\oberontb.dll [2008-01-06 540672]

                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
                  "WOOTASKBARICON"=C:\PROGRA~1\Wanadoo\TaskbarIcon.exe [2004-05-13 49152]
                  "WooCnxMon"=C:\PROGRA~1\Wanadoo\CnxMon.exe [2004-05-13 24576]
                  "Vade Retro Outlook Express"=C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe [2004-10-04 310272]
                  "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-01-08 136600]
                  "SpeedTouch USB Diagnostics"=C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe [2004-01-26 866816]
                  "SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-10-24 90112]
                  "PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
                  "PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168]
                  "PCMService"=c:\Apps\Powercinema\PCMService.exe [2005-05-11 127118]
                  "OmniPass"=C:\Apps\Softex\OmniPass\scureapp.exe [2005-08-12 1859584]
                  "nwiz"=nwiz.exe /install []
                  "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-08-02 86016]
                  "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-08-02 7110656]
                  "MM_MODULE"=C:\Program Files\MIC\HAWAII\Hawaii.exe [2005-07-12 90112]
                  "IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-05 208952]
                  "ccApp"=C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2004-09-07 58488]
                  "ATSwpNav"=C:\Program Files\Fingerprint Sensor\ATSwpNav -run []
                  "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-02-19 49152]
                  "TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2008-05-01 185632]
                  "fssui"=C:\Program Files\Windows Live\Family Safety\fsui.exe [2009-02-06 454000]
                  "MessengerPlus3"=C:\Program Files\MessengerPlus! 3\MsgPlus.exe [2009-03-25 190024]
                  "Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]
                  "VirusKeeper"=C:\Program Files\AxBx\VirusKeeper 2010 Pro Evaluation\VirusKeeper.exe [2009-09-25 5920640]
                  "SpyHunter Security Suite"=C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe [2009-04-02 868352]
                  "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
                  "Fork Help Free 64"=D:\Documents and Settings\All Users\Application Data\Live Bind Fork Help\ProcLoud.exe []
                  "GsiFinal"=rundll32 gspndll.dll,postInstall final []

                  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
                  "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-12-16 68856]
                  "MessengerPlus3"=C:\Program Files\MessengerPlus! 3\MsgPlus.exe [2009-03-25 190024]
                  "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
                  "MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
                  "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
                  "SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-09-15 1998576]
                  "Windows Layer"=pekjsk.exe []

                  D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
                  HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                  Kodak software updater.lnk - C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
                  Logiciel Kodak EasyShare.lnk - C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe

                  D:\Documents and Settings\Tustus\Menu Démarrer\Programmes\Démarrage
                  Outil de notification Live Search.lnk - D:\Documents and Settings\Tustus\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
                  C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OPXPGina]
                  C:\Apps\Softex\OmniPass\opxpgina.dll [2005-08-12 49152]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
                  C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
                  WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
                  "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                  "dontdisplaylastusername"=0
                  "legalnoticecaption"=
                  "legalnoticetext"=
                  "shutdownwithoutlogon"=1
                  "undockwithoutlogon"=1

                  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                  "NoDriveAutoRun"=67108863
                  "NoDriveTypeAutoRun"=323

                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                  "HonorAutoRunSetting"=
                  "NoDriveAutoRun"=
                  "NoDriveTypeAutoRun"=
                  "NoDrives"=

                  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
                  "%ProgramFiles%\AOL 9.0\aol.exe"="%ProgramFiles%\AOL 9.0\aol.exe:*:Enabled:AOL"
                  "%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe"="%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe:*:Enabled:SPLINTER CELL PANDORA"
                  "%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe"="%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe:*:Enabled:PANDORA"
                  "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
                  "C:\APPS\Inventime\my.exe"="C:\APPS\Inventime\my.exe:*:Enabled:INVENTIME"
                  "C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe"="C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe:*:Enabled:EasyShare"
                  "D:\Documents and Settings\Armelle\Local Settings\Temp\ImInstaller\IncrediMail\incredimail_install.exe"="D:\Documents and Settings\Armelle\Local Settings\Temp\ImInstaller\IncrediMail\incredimail_install.exe:*:Enabled:IncrediMail Installer"
                  "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
                  "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
                  "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
                  "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
                  "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
                  "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
                  "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
                  "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
                  "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
                  "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
                  "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
                  "C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
                  "C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
                  "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
                  "C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
                  "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
                  "C:\Program Files\microsoft office\Office12\OUTLOOK.EXE"="C:\Program Files\microsoft office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
                  "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
                  "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
                  "C:\APPS\skype\Phone\Skype.exe"="C:\APPS\skype\Phone\Skype.exe:*:Enabled:Skype"
                  "C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe"="C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe:*:Enabled:Kodak Software Updater"
                  "D:\Documents and Settings\All Users\Application Data\dc07611\WPdc07.exe"="D:\Documents and Settings\All Users\Application Data\dc07611\WPdc07.exe:*:Disabled:Windows PC Defender"
                  "C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Disabled:Java(TM) Platform SE binary"

                  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
                  "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
                  "C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
                  "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
                  "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
                  "C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
                  "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
                  "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
                  1. ======List of files/folders created in the last 1 months======

                    2009-09-26 12:59:33 ----D---- C:\rsit
                    2009-09-25 23:18:47 ----D---- C:\Program Files\Enigma Software Group
                    2009-09-25 21:08:37 ----D---- D:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
                    2009-09-25 21:08:26 ----D---- C:\Program Files\SUPERAntiSpyware
                    2009-09-25 21:08:25 ----D---- D:\Documents and Settings\Tustus\Application Data\SUPERAntiSpyware.com
                    2009-09-25 21:07:20 ----D---- C:\Program Files\Fichiers communs\Wise Installation Wizard
                    2009-09-25 18:36:45 ----A---- C:\WINDOWS\system32\o4Patch.exe
                    2009-09-25 18:36:45 ----A---- C:\WINDOWS\system32\IEDFix.C.exe
                    2009-09-25 18:36:45 ----A---- C:\WINDOWS\system32\Agent.OMZ.Fix.exe
                    2009-09-25 18:36:44 ----A---- C:\WINDOWS\system32\WS2Fix.exe
                    2009-09-25 18:36:44 ----A---- C:\WINDOWS\system32\VCCLSID.exe
                    2009-09-25 18:36:44 ----A---- C:\WINDOWS\system32\VACFix.exe
                    2009-09-25 18:36:44 ----A---- C:\WINDOWS\system32\swxcacls.exe
                    2009-09-25 18:36:44 ----A---- C:\WINDOWS\system32\swsc.exe
                    2009-09-25 18:36:44 ----A---- C:\WINDOWS\system32\SrchSTS.exe
                    2009-09-25 18:36:44 ----A---- C:\WINDOWS\system32\IEDFix.exe
                    2009-09-25 18:36:44 ----A---- C:\WINDOWS\system32\dumphive.exe
                    2009-09-25 18:36:44 ----A---- C:\WINDOWS\system32\404Fix.exe
                    2009-09-25 18:36:43 ----A---- C:\WINDOWS\system32\swreg.exe
                    2009-09-25 18:36:43 ----A---- C:\WINDOWS\system32\Process.exe
                    2009-09-25 16:47:07 ----D---- D:\Documents and Settings\Tustus\Application Data\Uniblue
                    2009-09-25 16:37:46 ----SHD---- C:\RECYCLER
                    2009-09-24 20:37:40 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
                    2009-09-24 19:12:41 ----A---- C:\ComboFix.txt
                    2009-09-24 18:56:08 ----D---- C:\WINDOWS\temp
                    2009-09-24 18:13:26 ----A---- C:\WINDOWS\zip.exe
                    2009-09-24 18:13:15 ----D---- C:\WINDOWS\ERDNT
                    2009-09-24 18:11:36 ----AD---- C:\Qoobox
                    2009-09-24 16:48:05 ----A---- C:\WINDOWS\system32\tmp.txt
                    2009-09-24 16:48:01 ----A---- C:\rapport.txt
                    2009-09-24 16:42:48 ----D---- D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
                    2009-09-24 16:42:48 ----D---- C:\Program Files\Spybot - Search & Destroy
                    2009-09-22 18:30:37 ----A---- C:\WINDOWS\KillProcess.INI
                    2009-09-22 16:27:15 ----D---- D:\Documents and Settings\Tustus\Application Data\Malwarebytes
                    2009-09-22 16:26:59 ----D---- D:\Documents and Settings\All Users\Application Data\Malwarebytes
                    2009-09-22 15:59:55 ----A---- C:\WINDOWS\presd.txt
                    2009-09-22 14:25:47 ----D---- C:\Program Files\CCleaner
                    2009-09-10 12:35:13 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
                    2009-09-10 12:34:49 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$

                    ======List of files/folders modified in the last 1 months======

                    2009-09-26 17:11:00 ----D---- C:\WINDOWS\Prefetch
                    2009-09-26 17:10:33 ----D---- C:\Program Files\Wanadoo
                    2009-09-26 17:09:18 ----D---- C:\WINDOWS\system32\drivers
                    2009-09-26 17:06:41 ----SD---- C:\WINDOWS\Tasks
                    2009-09-26 17:04:03 ----A---- C:\WINDOWS\SchedLgU.Txt
                    2009-09-26 16:43:50 ----D---- D:\Documents and Settings\All Users\Application Data\GamesBar
                    2009-09-26 16:43:24 ----D---- C:\Program Files\GamesBar
                    2009-09-26 16:14:06 ----RD---- C:\Program Files
                    2009-09-26 13:17:37 ----D---- C:\WINDOWS\system32\CatRoot2
                    2009-09-26 12:59:24 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
                    2009-09-26 11:10:57 ----D---- C:\Config.Msi
                    2009-09-26 11:04:53 ----SHD---- C:\WINDOWS\Installer
                    2009-09-26 10:59:23 ----D---- C:\Program Files\Fichiers communs\Adobe
                    2009-09-26 10:58:59 ----D---- C:\WINDOWS\WinSxS
                    2009-09-26 10:58:29 ----D---- D:\Documents and Settings\All Users\Application Data\Adobe
                    2009-09-26 10:56:19 ----D---- C:\Program Files\Adobe
                    2009-09-26 10:53:42 ----AD---- C:\WINDOWS\system32
                    2009-09-25 23:44:09 ----D---- C:\temp
                    2009-09-25 22:38:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
                    2009-09-25 22:24:15 ----D---- D:\Documents and Settings\All Users\Application Data\Google Updater
                    2009-09-25 21:07:20 ----D---- C:\Program Files\Fichiers communs
                    2009-09-25 20:30:24 ----D---- C:\Program Files\AxBx
                    2009-09-25 18:26:05 ----D---- C:\WINDOWS
                    2009-09-25 15:58:05 ----SD---- C:\WINDOWS\Downloaded Program Files
                    2009-09-24 19:09:41 ----A---- C:\WINDOWS\system.ini
                    2009-09-24 19:02:31 ----D---- C:\WINDOWS\system32\config
                    2009-09-24 18:43:13 ----D---- C:\WINDOWS\AppPatch
                    2009-09-24 16:21:36 ----AD---- D:\Documents and Settings\All Users\Application Data\TEMP
                    2009-09-22 20:44:06 ----D---- C:\WINDOWS\network diagnostic
                    2009-09-22 17:37:50 ----D---- C:\WINDOWS\Minidump
                    2009-09-22 17:37:50 ----D---- C:\WINDOWS\Debug
                    2009-09-22 16:02:18 ----A---- C:\WINDOWS\msnfix.txt
                    2009-09-22 13:11:43 ----D---- D:\Documents and Settings\All Users\Application Data\OD2
                    2009-09-21 22:39:24 ----D---- C:\Program Files\eMule
                    2009-09-14 18:34:31 ----HD---- C:\WINDOWS\inf
                    2009-09-10 13:17:02 ----D---- C:\Program Files\Microsoft Silverlight
                    2009-09-10 12:35:17 ----RSHD---- C:\WINDOWS\system32\dllcache
                    2009-09-10 12:34:48 ----HD---- C:\WINDOWS\$hf_mig$
                    2009-09-10 12:34:32 ----D---- D:\Documents and Settings\All Users\Application Data\Microsoft Help
                    2009-09-07 16:13:02 ----A---- C:\WINDOWS\win.ini

                    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                    R1 AmdK8;Pilote de processeur AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 43008]
                    R1 DcCam;Kodak Camera Proxy; C:\WINDOWS\system32\DRIVERS\DcCam.sys [2005-06-16 37150]
                    R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
                    R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
                    R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
                    R1 SAVRT;SAVRT; \??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRT.SYS []
                    R1 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys []
                    R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2004-08-27 266464]
                    R1 VIAPFD;VIAPFD; C:\WINDOWS\System32\Drivers\VIAPFD.SYS [2001-12-18 3279]
                    R2 DCFS2K;Kodak DCFS2K Driver; C:\WINDOWS\system32\drivers\dcfs2k.sys [2005-03-31 38673]
                    R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152]
                    R2 irda;Protocole IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
                    R2 SAVRTPEL;SAVRTPEL; \??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRTPEL.SYS []
                    R3 3xHybrid;3xHybrid service; C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-05-27 799744]
                    R3 alcan5wn;SpeedTouch USB ADSL PPP Networking Driver (NDISWAN); C:\WINDOWS\system32\DRIVERS\alcan5wn.sys [2003-12-08 53600]
                    R3 alcaudsl;SpeedTouch ADSL Modem ATM Transport; C:\WINDOWS\system32\DRIVERS\alcaudsl.sys [2003-12-08 70688]
                    R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-10-26 3786944]
                    R3 ATSWPDRV;AuthenTec TruePrint USB Driver (AES2500); C:\WINDOWS\System32\Drivers\ATSwpDrv.sys [2005-03-29 116594]
                    R3 CAM1210;SM0121 USB 2.0 Video Camera; C:\WINDOWS\System32\Drivers\cam1210.sys [2006-07-24 89856]
                    R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
                    R3 MosIrUsb;MosIrUsb.sys; C:\WINDOWS\system32\DRIVERS\MosIrUsb.sys [2004-04-14 20736]
                    R3 NAVENG;NAVENG; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20070702.017\NAVENG.Sys []
                    R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20070702.017\NavEx15.Sys []
                    R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2005-08-02 3198560]
                    R3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
                    R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-12-02 70912]
                    R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
                    R3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2004-08-27 11040]
                    R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
                    R3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2004-08-27 171424]
                    R3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2004-08-27 34496]
                    R3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20090911.001\symidsco.sys []
                    R3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2004-08-27 46208]
                    R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2004-08-27 25824]
                    R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
                    R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
                    R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
                    R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
                    R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
                    S1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys []
                    S1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys []
                    S1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys []
                    S1 Exportit;Exportit; C:\WINDOWS\system32\DRIVERS\exportit.sys [2005-03-31 152081]
                    S2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys []
                    S2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys []
                    S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
                    S3 catchme;catchme; \??\C:\Coco\catchme.sys []
                    S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
                    S3 DcFpoint;DcFpoint; C:\WINDOWS\system32\DRIVERS\DcFpoint.sys [2005-03-31 61564]
                    S3 DcLps;Legacy Polling Service; C:\WINDOWS\system32\DRIVERS\DcLps.sys [2005-03-31 8022]
                    S3 DcPTP;dcptp; C:\WINDOWS\system32\DRIVERS\DcPTP.sys [2005-03-31 70262]
                    S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
                    S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-13 49664]
                    S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-13 16496]
                    S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-13 21568]
                    S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
                    S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
                    S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2008-04-13 22016]
                    S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
                    S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
                    S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
                    S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
                    S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
                    S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
                    S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
                    S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
                    S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
                    S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2005-06-14 104576]
                    S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
                    S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
                    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

                    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

                    R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-01-15 110592]
                    R2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe [2004-09-07 197752]
                    R2 ccProxy;Symantec Network Proxy; C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe [2004-09-07 234616]
                    R2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe [2004-09-07 164984]
                    R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe [2005-05-11 221266]
                    R2 CLSched;CyberLink Task Scheduler (CTS); c:\APPS\Powercinema\Kernel\TV\CLSched.exe [2005-05-11 110672]
                    R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [2005-05-11 61440]
                    R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe [2001-10-25 90112]
                    R2 fsssvc;Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
                    R2 GenericHidService;Generic Service for HID Keyboard Input Collections; c:\APPS\HIDSERVICE\HIDSERVICE.exe [2005-01-07 49152]
                    R2 Irmon;Moniteur infrarouge; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
                    R2 ISSVC;ISSvc; C:\Program Files\Norton Internet Security\ISSVC.exe [2004-10-28 83088]
                    R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-01-08 152984]
                    R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
                    R2 navapsvc;Service Norton AntiVirus Auto-Protect; C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe [2004-11-15 176768]
                    R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-08-02 127043]
                    R2 omniserv;Softex OmniPass Service; C:\Apps\Softex\OmniPass\Omniserv.exe [2005-08-12 32768]
                    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
                    R2 SNDSrvc;Symantec Network Drivers Service; C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe [2004-08-27 206048]
                    R2 SPBBCSvc;Symantec SPBBCSvc; C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe [2004-07-21 173160]
                    R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2004-02-26 49152]
                    R2 vkservice;VirusKeeper antivirus/antispyware; C:\Program Files\AxBx\VirusKeeper 2010 Pro Evaluation\vk_service.exe [2009-09-24 1121664]
                    S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
                    S2 gupdate1c9ece72abbab74;Service Google Update (gupdate1c9ece72abbab74); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-06-14 133104]
                    S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-21 183280]
                    S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]
                    S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\M [2007-12-29 140]
                    S3 ccPwdSvc;Symantec Password Validation; C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe [2004-09-07 78968]
                    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\M [2007-12-29 140]
                    S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\M [2007-12-29 140]
                    S3 idsvc;Windows CardSpace; C:\WINDOWS\M [2007-12-29 140]
                    S3 KodakCCS;Kodak Camera Connection Software; C:\WINDOWS\system32\drivers\KodakCCS.exe [2005-03-30 411920]
                    S3 MysqlInventime;MysqlInventime; C:\Apps\INVENT~1\mysql\bin\mysqld-nt --defaults-file=C:\Apps\Inventime\mysql\my.ini MysqlInventime []
                    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
                    S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
                    S3 SAVScan;SAVScan; C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe [2004-07-23 197864]
                    S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
                    S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
                    S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\M [2007-12-29 140]

                    -----------------EOF-----------------
                    1. Le fichier info :

                      info.txt logfile of random's system information tool 1.06 2009-09-26 17:25:13

                      ======Uninstall list======

                      -->"C:\Program Files\Fichiers communs\aolshare\Coach\AolCInUn.exe" -lang="fr-fr"
                      -->C:\PROGRA~1\GOTOSO~1\VADERE~1\UNWISE.EXE C:\PROGRA~1\GOTOSO~1\VADERE~1\INSTALL.LOG
                      -->C:\PROGRA~1\Norman\NORMAN~1\UNWISE.EXE C:\PROGRA~1\Norman\NORMAN~1\INSTALL.LOG
                      -->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
                      -->C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe
                      -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
                      -->C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VCSetup.exe /REMOVE
                      -->C:\Program Files\Fichiers communs\Symantec Shared\SymSetup\{A93C9E60-29B6-49da-BA21-F70AC6AADE20}.exe /X
                      -->C:\Program Files\Learn2.com\StRunner\stuninst.exe
                      -->C:\Program Files\MIC\HAWAII\uninst.exe
                      -->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
                      -->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
                      -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
                      -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
                      -->C:\WINDOWS\UNIN040C.EXE -f"C:\Program Files\PhotoDeluxe HE 3.1\DeIsL1.isu"
                      -->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
                      -->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
                      -->MsiExec.exe /I{8B543A39-9401-44F4-B572-069E64C15189}
                      -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.EXE" -uninstall
                      -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F9CFBD8-8F77-4DCD-8CB5-CDD5F653C872}\setup.exe" -l0x40c
                      -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4F1DA6BF-3614-48A1-9970-9E90F646789E}\setup.exe" -l0x40c
                      -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5A065EA0-0EEC-4E94-A2A0-40812576C122}\setup.exe" -l0x40c
                      -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
                      -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x40c
                      -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F4E57F49-84B4-4CF2-B0A1-8CA1752BDF7E}\setup.exe" -l0x40c
                      -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0A32C786-85DE-48F8-9E54-848B3E34A90C}\setup.exe" -l0x40c -removeonly
                      -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
                      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
                      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
                      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
                      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
                      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
                      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
                      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
                      2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
                      ACDSee 8-->MsiExec.exe /I{DD54C6DE-B787-406D-A5A7-A49E0471E45B}
                      Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
                      Adobe Reader 8.1.3 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
                      Ahead Nero - Burning Rom-->C:\WINDOWS\UNNERO.exe /UNINSTALL
                      aMSN 0.97RC1-->C:\Program Files\aMSN\uninstall.exe
                      Apple Mobile Device Support-->MsiExec.exe /I{D8AB8F0C-CEEB-4A29-8EF5-219B064813F4}
                      Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
                      Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
                      Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
                      ATNavigation-->MsiExec.exe /I{FB159DD9-6E5F-4C94-B288-E9D1D9FAFBA1}
                      Audacity 1.3.7 (Unicode)-->"C:\Program Files\Audacity 1.3 Beta (Unicode)\unins000.exe"
                      CamfrogWEB Advanced ActiveX Plugin (remove only)-->"C:\Program Files\CFWebAdvancedU\Uninstall.exe"
                      CardRd81-->MsiExec.exe /I{54C8FE84-89C4-40E8-976C-439EB0729BD6}
                      CC_ccProxyExt-->MsiExec.exe /I{DA42FDCA-7C5A-43EF-9A05-CCE148ADF919}
                      ccCommon-->MsiExec.exe /I{DC367608-64A7-4BF7-92F4-8BAA25BA02DB}
                      CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
                      ccPxyCore-->MsiExec.exe /I{FC08587A-4F01-4188-819F-F55880022917}
                      CCScore-->MsiExec.exe /I{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}
                      Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
                      Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
                      Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
                      Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
                      Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
                      Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
                      Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
                      CR2-->MsiExec.exe /I{432C3720-37BF-4BD7-8E49-F38E090246D0}
                      dBpoweramp Musepack Codec-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Musepack Codec.dat
                      dBpoweramp Music Converter-->"C:\WINDOWS\system32\SpoonUninstall.exe" <uninstall>C:\WINDOWS\system32\SpoonUninstall-dBpoweramp Music Converter.dat
                      EasyBail® 2008-->MsiExec.exe /I{D12261D7-A778-4CDB-B515-3FA900AC5D30}
                      eMule-->"C:\Program Files\eMule\Uninstall.exe"
                      EPSON CardMonitor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{109D28C7-FB38-483A-9C91-001CB59E2699}\SETUP.EXE" uninst
                      EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /r
                      EPSON PhotoQuicker3.2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B2EFE303-A594-11D5-95EB-005004BC1C65}\setup.exe" uninst
                      EPSON PhotoStarter3.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5983C895-DDA4-45D9-A8D1-877D5DE7693E}\SETUP.EXE" uninst
                      EPSON PRINT Image Framer Tool1.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{37D67C45-8484-4398-B5C1-3CAE19FDDF22}\SETUP.EXE" anything
                      ESSBrwr-->MsiExec.exe /I{643EAE81-920C-4931-9F0B-4B343B225CA6}
                      ESSCDBK-->MsiExec.exe /I{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}
                      ESScore-->MsiExec.exe /I{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}
                      ESSCT-->MsiExec.exe /I{8BB4B58A-A402-4DE8-8FCD-287E60B88DD8}
                      ESSEMAIL-->MsiExec.exe /I{FEDE2483-87B7-44C1-A5BB-D75AEB8B6340}
                      ESSgui-->MsiExec.exe /I{91517631-A9F3-4B7C-B482-43E0068FD55A}
                      ESShelp-->MsiExec.exe /I{87843A41-7808-4F2E-B13F-25C1E67CF2FD}
                      ESSini-->MsiExec.exe /I{8E92D746-CD9F-4B90-9668-42B74C14F765}
                      ESSPCD-->MsiExec.exe /I{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}
                      ESSPDock-->MsiExec.exe /I{FCDB1C92-03C6-4C76-8625-371224256091}
                      ESSSONIC-->MsiExec.exe /I{4F677FC7-7AA8-412B-A957-F13CBE1C7331}
                      ESSTOOLS-->MsiExec.exe /I{8A502E38-29C9-49FA-BCFA-D727CA062589}
                      essvcpt-->MsiExec.exe /I{D1973749-F5E7-40EB-B528-F2B78685B9FF}
                      ESSvpaht-->MsiExec.exe /I{A5B3EB8A-4071-42F0-8E8E-7A8342AA8E69}
                      ESSvpot-->MsiExec.exe /I{48C82F7A-F100-4DAB-A310-8E18BF2159E1}
                      Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
                      GamesBar 2.0.1.12-->C:\Program Files\GamesBar\uninst.exe
                      Gestion Immobilière 2007 v3.3-->"C:\Program Files\Emjysoft\Gestion Immobilière\unins000.exe"
                      Gestion Immobilière 2008 v4.2-->"C:\Program Files\Emjysoft\gestion_immo\unins000.exe"
                      Google Chrome-->"C:\Program Files\Google\Chrome\Application\2.0.172.43\Installer\setup.exe" --uninstall --system-level
                      Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall
                      Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
                      Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
                      HijackThis 2.0.2-->"D:\Documents and Settings\Tustus\Bureau\HijackThis.exe" /uninstall
                      HLPIndex-->MsiExec.exe /I{38441BE7-79B0-42B8-8297-833704F949FE}
                      HLPPDOCK-->MsiExec.exe /I{154508C0-07C5-4659-A7A0-E49968750D21}
                      HLPSFO-->MsiExec.exe /I{8DD94CA3-BCD2-49C0-B537-F3B5D95FF0C8}
                      Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
                      Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
                      Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
                      HP Customer Participation Program 7.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
                      HP Imaging Device Functions 7.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
                      HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70}
                      HP Photosmart, Officejet and Deskjet 7.0.A-->C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat
                      HP Software Update-->MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
                      HP Solution Center 7.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
                      Ink-->MsiExec.exe /I{9FCB2876-554D-491D-A2CD-58F8252D6C64}
                      Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
                      Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
                      iPlayer Mass Storage Driver V3.1 -->C:\WINDOWS\iun6002.exe "C:\Program Files\iPlayer Mass Storage Driver V3.1\irunin.ini"
                      J2SE Development Kit 5.0 Update 6-->MsiExec.exe /I{32A3A4F4-B792-11D6-A78A-00B0D0150060}
                      J2SE Runtime Environment 5.0 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150020}
                      J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
                      Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
                      Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
                      Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
                      Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
                      Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
                      Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
                      K-Lite Codec Pack 4.7.5 (Full)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
                      KSU-->MsiExec.exe /I{B997C2A0-4383-41BF-B76E-9B8B7ECFB267}
                      Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
                      LocationsAssistance-->"C:\Program Files\LocationsAssistance\unins000.exe"
                      Logiciel Kodak EasyShare-->D:\Documents and Settings\All Users\Application Data\Kodak\EasyShareSetup\$SETUP_190007_24636\Setup.exe /APR-REMOVE
                      Ma-Config.com plugin-->MsiExec.exe /I{6F06A42D-525C-49ED-8622-E16790956CD8}
                      Macromedia Shockwave Player-->MsiExec.exe /X{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
                      Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
                      Messenger Plus! 3-->"C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /Remove
                      Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
                      Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
                      Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
                      Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
                      Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
                      Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
                      Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
                      Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
                      Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
                      Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
                      Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
                      Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
                      Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
                      Microsoft Office Excel Viewer 2003-->MsiExec.exe /I{9084040C-6000-11D3-8CFE-0150048383C9}
                      Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
                      Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
                      Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-040C-0000-0000000FF1CE}
                      Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
                      Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
                      Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF040C-6000-11D3-8CFE-0150048383C9}
                      Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
                      Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
                      Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
                      Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
                      Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
                      Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
                      Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
                      Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
                      Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
                      Microsoft Office Standard 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall STANDARD /dll OSETUP.DLL
                      Microsoft Office Standard 2007-->MsiExec.exe /X{90120000-0012-0000-0000-0000000FF1CE}
                      Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
                      Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
                      Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
                      Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
                      Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
                      Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
                      Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
                      mIRC-->"C:\ts2-7\mirc.exe" -uninstall
                      1. Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour le Codeur Windows Media (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
                        Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
                        Mise à jour pour Windows Internet Explorer 8 (KB971930)-->"C:\WINDOWS\ie8updates\KB971930-IE8\spuninst\spuninst.exe"
                        Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
                        Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
                        Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
                        Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
                        Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
                        Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
                        Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
                        Modem DSL ECI Telecom-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C7B39B40-52C3-11D4-AFCE-00E0B8138A4A}\setup.exe" -l0x40c REMOVE
                        Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
                        Mozilla Firefox (3.0.1)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
                        MSN Reaper-->"C:\Program Files\MSN Reaper\uninst.exe"
                        MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
                        MSRedist-->MsiExec.exe /I{B7C61755-DB48-4003-948F-3D34DB8EAF69}
                        MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
                        MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
                        MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
                        MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                        Norton AntiSpam-->MsiExec.exe /I{3B29A786-5803-4e9e-9B58-3014A5B4E519}
                        Norton AntiSpam-->MsiExec.exe /I{5677563D-0CB1-485f-9E18-C5025306BB3F}
                        Norton AntiVirus 2005-->MsiExec.exe /X{C6F5B6CF-609C-428E-876F-CA83176C021B}
                        Norton Internet Security-->MsiExec.exe /I{12E2B9E9-05B1-407d-B0FD-B5F350535125}
                        Norton Internet Security-->MsiExec.exe /I{449F3A9E-9903-4a0d-A209-08030D45A935}
                        Norton Internet Security-->MsiExec.exe /I{48185814-A224-447a-81DA-71BD20580E1B}
                        Norton Internet Security-->MsiExec.exe /I{526AD5DC-CFC4-4f2a-8442-C84CC91D6C7F}
                        Norton Internet Security-->MsiExec.exe /I{A93C9E60-29B6-49da-BA21-F70AC6AADE20}
                        Norton Internet Security-->MsiExec.exe /I{C9D599E1-6B68-4a1f-8A4F-A1DB433DB1BF}
                        Norton Internet Security-->MsiExec.exe /I{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}
                        Norton Internet Security-->MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
                        Norton Internet Security-->MsiExec.exe /I{FC2C0536-583C-46c0-844A-62CECAE01F22}
                        Norton WMI Update-->MsiExec.exe /X{E85FA9A1-C241-4698-893B-DD99509B8DB0}
                        Norton WMI Update-->MsiExec.exe /X{F64306A5-4C32-41bb-B153-53986527FAB4}
                        Notifier-->MsiExec.exe /I{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}
                        NVIDIA Drivers-->C:\WINDOWS\system32\NVUNINST.EXE UninstallGUI
                        OCR Software by I.R.I.S 7.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
                        OfotoXMI-->MsiExec.exe /I{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}
                        OpenOffice.org 2.0-->MsiExec.exe /I{E2055AB2-D1C7-4147-A384-2B4B1C04282B}
                        OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}
                        OTtBP-->MsiExec.exe /I{F71760CD-0F8B-4DCC-B7B7-6B223CC3843C}
                        OTtBPSDK-->MsiExec.exe /I{3CA39B0C-BA85-4D42-AC0F-1FF5F60C3353}
                        Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
                        Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
                        PhotoBox 3.2.5-->"C:\Program Files\PhotoBox\uninstall.exe"
                        Picasa 2-->"C:\Program Files\Picasa2\Uninstall.exe"
                        Poseidon For UML CE 2.6-->"C:\Program Files\Poseidon For UML CE 2.6\UninstallerData\Uninstall Poseidon For UML CE 2.6.exe"
                        QuickTime-->MsiExec.exe /I{08094E03-AFE4-4853-9D31-6D0743DF5328}
                        RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
                        Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\Setup.exe" -l0x40c -removeonly
                        Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
                        Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
                        Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
                        Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
                        Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
                        Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
                        Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
                        Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
                        Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
                        Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
                        Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
                        Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
                        SereneScreen Marine Aquarium 2-->"C:\Program Files\SereneScreen\Marine Aquarium 2\unins000.exe"
                        SFR-->MsiExec.exe /I{DB02F716-6275-42E9-B8D2-83BA2BF5100B}
                        SFR2-->MsiExec.exe /I{A0AF08BA-3630-4505-BFB2-A41F3837B0D0}
                        SHASTA-->MsiExec.exe /I{605A4E39-613C-4A12-B56F-DEFBE6757237}
                        SKIN0001-->MsiExec.exe /I{FDF9943A-3D5C-46B3-9679-586BD237DDEE}
                        SKINXSDK-->MsiExec.exe /I{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}
                        Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}
                        Sonic MyDVD-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
                        Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
                        SPBBC-->MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
                        SpeedTouch USB Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}\setup.exe" /l040c -Control_Panel
                        Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
                        SpyHunter-->"C:\Program Files\Enigma Software Group\SpyHunter\Uninstall.exe" "C:\Program Files\Enigma Software Group\SpyHunter\install.log" -u
                        StuffPlug 3-->C:\Program Files\StuffPlug3\Uninstall.exe
                        SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
                        SymNet-->MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}
                        Taliessin script v2-7-->c:\ts2-7\Uninstal.exe
                        TerraExplorer-->C:\Program Files\Skyline\TerraExplorer\Setup.exe [OP]/U
                        Top Congés 3.0.5.0-->"C:\Program Files\Top Conges\unins000.exe"
                        Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
                        Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
                        Update for Microsoft Office Outlook 2007 (KB969907)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {74F98B24-AFBD-4800-9BD6-87D349B5C462}
                        Update for Outlook 2007 Junk Email Filter (kb973514)-->msiexec /package {90120000-0012-0000-0000-0000000FF1CE} /uninstall {03B11C77-336F-43B4-9B43-79890BA84504}
                        USB Video Camera Driver v1.10-->MsiExec.exe /I{926B578B-505F-4820-A62D-088E1124FED4}
                        User Agent String Utility-->MsiExec.exe /I{9DF095E1-8EC2-4892-8740-93769DB1E944}
                        VirusKeeper 2010 Pro Evaluation-->"C:\Program Files\AxBx\VirusKeeper 2010 Pro Evaluation\unins000.exe"
                        VPRINTOL-->MsiExec.exe /I{999D43F4-9709-4887-9B1A-83EBB15A8370}
                        Wanadoo Messager-->C:\PROGRA~1\WANADO~1\UNWISE.EXE C:\PROGRA~1\WANADO~1\INSTALL.LOG
                        Wanadoo-->C:\PROGRA~1\Wanadoo\Shell.exe desinstall.shl
                        Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
                        Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
                        Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
                        Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
                        Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
                        Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
                        Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
                        Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
                        Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
                        Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
                        Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
                        Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
                        Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
                        Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
                        WIRELESS-->MsiExec.exe /I{F9593CFB-D836-49BC-BFF1-0E669A411D9F}
                        1. =====HijackThis Backups=====

                          O1 - Hosts: 206.53.61.77 google.com.tw [2009-09-22]
                          O1 - Hosts: 74.125.45.100 paysoftbillsolution.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.az [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.cd [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.rw [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.fm [2009-09-22]
                          O1 - Hosts: 74.125.45.100 getantivirusplusnow.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.kr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ro [2009-09-22]
                          O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.na [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ae [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ca [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.qa [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ws [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.us [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.ng [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.pl [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.sg [2009-09-22]
                          O1 - Hosts: 74.125.45.100 4-open-davinci.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.it [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.za [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.mx [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.nf [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.nz [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.fi [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.tm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.dk [2009-09-22]
                          O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.tj [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.nl [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.bs [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.nr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ch [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.in [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.sh [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.gm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ma [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.la [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.si [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.np [2009-09-22]
                          O1 - Hosts: 74.125.45.100 secure-plus-payments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.li [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.in [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.ck [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ms [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.sn [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.as [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.pt [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.ls [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.getavplusnow.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.pn [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.dj [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.ma [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.no [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.tz [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ht [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.nu [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.gr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.sm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.my [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.dm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.jp [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ge [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.tt [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.il [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ba [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.ug [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.pr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ru [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.mu [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ki [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.id [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.be [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.af [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.jm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.at [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.fr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.gg [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.sc [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.zm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.tl [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.hk [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.lv [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.bg [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.st [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.uk [2009-09-22]
                          O1 - Hosts: 74.125.45.100 privatesecuredpayments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.se [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.de [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.im [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ee [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.vu [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ie [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.mw [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.gh [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.na [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.np [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.nz [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.sm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.gg [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.jp [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.in [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.dm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.fr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.lv [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ge [2009-09-22]
                          O1 - Hosts: 74.125.45.100 secure-plus-payments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.li [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ht [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.gm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.fm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.si [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.tz [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.tm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.sc [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.sh [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.jm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.id [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.as [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.nf [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.us [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.il [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.im [2009-09-22]
                          O1 - Hosts: 74.125.45.100 privatesecuredpayments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.cd [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.tl [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.tt [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.my [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.dj [2009-09-22]
                          O1 - Hosts: 74.125.45.100 4-open-davinci.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.pr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.bg [2009-09-22]
                          O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.sn [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ru [2009-09-22]
                          O1 - Hosts: 74.125.45.100 getantivirusplusnow.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.in [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.pt [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.bs [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.se [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ie [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.tw [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.vu [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.nu [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ki [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.zm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.at [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.az [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ma [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.uk [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.za [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.la [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.mw [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.ls [2009-09-22]
                          O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.fi [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ae [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.de [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.ug [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.kr [2009-09-22]
                          O1 - Hosts: 74.125.45.100 paysoftbillsolution.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.qa [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.pl [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.it [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.nr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ba [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.ma [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.no [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.dk [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.mu [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.getavplusnow.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ee [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ca [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.gh [2009-09-22]
                          O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.sg [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ws [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ro [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ch [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.nl [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.tj [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.ck [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.af [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.gr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.rw [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.hk [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.st [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.ng [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.pn [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ms [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.mx [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.be [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.id [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.gm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.tl [2009-09-22]
                          O1 - Hosts: 74.125.45.100 getantivirusplusnow.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ca [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.ls [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.mu [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.sn [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ie [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.be [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.lv [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.tz [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.ma [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.at [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.pn [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ae [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.za [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.sg [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.jm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.jp [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.my [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.az [2009-09-22]
                          O1 - Hosts: 74.125.45.100 paysoftbillsolution.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ru [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.dk [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.gh [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.li [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ma [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.in [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ge [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ht [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.pr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.nr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.na [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ws [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.bs [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.as [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.sh [2009-09-22]
                          O1 - Hosts: 74.125.45.100 privatesecuredpayments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.sm [2009-09-22]
                          O1 - Hosts: 74.125.45.100 secure-plus-payments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.np [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.mw [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.gr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.fr [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ba [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.pl [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.ug [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.mx [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.fm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.hk [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ch [2009-09-22]
                          O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.la [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.tm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.bg [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.cd [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.ng [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.nu [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.si [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.st [2009-09-22]
                          O1 - Hosts: 74.125.45.100 4-open-davinci.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.af [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.tj [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.kr [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.gg [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.dm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.tt [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.dj [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ee [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.im [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.us [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.se [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.qa [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.uk [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.tw [2009-09-22]
                          O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.rw [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.pt [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.com.nf [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.vu [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.ck [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.no [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ro [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ms [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.ki [2009-09-22]
                          O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.fi [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.sc [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.in [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.it [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.de [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.nz [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.getavplusnow.com [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.il [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.co.zm [2009-09-22]
                          O1 - Hosts: 206.53.61.77 google.nl [2009-09-22]
                          O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 privatesecuredpayments.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 4-open-davinci.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 getantivirusplusnow.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 secure-plus-payments.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 paysoftbillsolution.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.getavplusnow.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com [2009-09-22]
                          O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com [2009-09-22]
                          • 1
                          • 2